caphrim007
commented
6 years ago @tthomas0702 it's complicated.
There is no such API to just "give it an iApp template". The API instead requires that you provide all of the fields of an iApp template. This means you need to essentially split apart a given iApp template into its component parts and then POST a JSON payload whose fields contain those component parts.
JSON is required, but the fields would hold the APL.
If you query this URL,
You can see the following
{
"kind": "tm:sys:application:template:templatecollectionstate",
"selfLink": "https://localhost/mgmt/tm/sys/application/template/example?ver=13.1.0",
"items": [
{
"propertyDescriptions": {
"actions": "Manage the set of actions associated with an application template.",
"description": "User defined description.",
"ignoreVerification": "Set to true to temporarily stop the verification of signature or checksum. Signature or checksum is still retained.",
"requiresBigipVersionMax": "Specifies the maximum version of BIG-IP required by this template.",
"requiresBigipVersionMin": "Specifies the minimum version of BIG-IP required by this template.",
"requiresModules": "Adds, deletes, or replaces the list of modules that are required to be provisioned or enabled for this template to work.",
"signingKey": "The private key to use for signing the template. Only for use with the generate signature command.",
"tmplChecksum": "Computes a checksum for the script.",
"tmplSignature": "Sign the script using the specified private key and corresponding public certificate."
},
"actions": {
"isSubcollection": true,
"propertyDescriptions": {
"htmlHelp": "The help for the application template action formatted as HTML.",
"implementation": "The script that is executed to create the configuration objects associated with the application.",
"macro": "",
"presentation": "Specifies what questions must be answered to create an application from the template.",
"roleAcl": "List of roles that are allowed to execute the action.",
"runAs": "The user account that will be used to execute the implementation script. If no account is specified, the script is executed as the calling user."
}
},
"description": "",
"ignoreVerification": "false",
"requiresBigipVersionMax": "",
"requiresBigipVersionMin": "",
"requiresModules": [],
"signingKey": "",
"tmplChecksum": "",
"tmplSignature": "",
"naturalKeyPropertyNames": [
"name",
"partition",
"subPath"
]
}
]
}You can see that there are a number of fields there, some of them which relate to the sections of an iApp itself. So, the hard part is left for the user to figure out unfortunately.
As you might imagine, trying to split up an iApp template is nearly impossible due to the bracing and escaping of bracing that may be codified in them. It's not totally impossible, but its not just template.split("{") either.
For this reason, the Ansible modules use a different, arguably more simple, approach. Shown here
We upload the template, and then use tmsh over REST to install it. This has the added advantage of picking up (automatically) and procs that you may define outside of the "sys application template FOO { ... }" blob (this inclusion is used heavily by iApps that F5 publishes and supports.
So I would recommend this alternate approach for what you want to do.
Lemme know if you have any other questions
tthomas0702
wojtek0806
I am attempting to import an iApp to a BIG-IP and failing. I am not 100% sure I am doing it correctly so I would like to show how I am doing it and then show the data I collected on the results. I can import an iApp template successfully using Postman.
If I am doing this wrong please give me some pointers and ignore the data I collected about the failure.
Versions: Python 2.7.12 f5-sdk 3.0.8 BIG-IP 13.0.0-HF3
What I am dong that is failing:
Question: For "template" should I be giving JSON or iApp tcl script? In the above I am giving json.
I took capture durng a failure and during a working example with Postman to see the difference. Some parts have been shorted to make more readable:
Failure:
Working Postman Capture:
It looks like, in the failed capture, that some keys are being added into the json that look out of place. eg. "partition", "name", and "template" at the begining. If I leave out "partition" or "name", it errors requiring them.
I have tried a number of modifications to the json but always get the same error. There error message is originating from the BIG-IP:
/var/log/ltm: Jan 7 14:17:48 ip-10-0-3-235 err mcpd[5763]: 01070734:3: Configuration error: An application template (/Common/appsvcs_integration_v2.0.004) must define a "definition" action
I attached the file with the POST data I am using: json_post_appsvcs_2.0.004.txt