�
�Udac @` s� d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
Z
d d l m Z yT d d
l
m Z d d l m Z d d l m Z d d l m Z d d l m Z Wna e k
r%d d
l m Z d d l m Z d d l m Z d d l m Z d d l m Z n Xd e f d � � YZ d e f d � � YZ d e f d � � YZ d � Z e d k r�e � n d S( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont stableinterfacet statust certifiedt supported_bys�
---
module: bigip_device_trust
short_description: Manage the trust relationships between BIG-IPs
description:
- Manage the trust relationships between BIG-IPs. Devices, once peered, cannot
be updated. If updating is needed, the peer must first be removed before it
can be re-added to the trust.
version_added: 2.5
options:
peer_server:
description:
- The peer address to connect to and trust for synchronizing configuration.
This is typically the management address of the remote device, but may
also be a Self IP.
type: str
required: True
peer_hostname:
description:
- The hostname that you want to associate with the device. This value will
be used to easily distinguish this device in BIG-IP configuration.
- When trusting a new device, if this parameter is not specified, the value
of C(peer_server) will be used as a default.
type: str
peer_user:
description:
- The API username of the remote peer device that you are trusting. Note
that the CLI user cannot be used unless it too has an API account. If this
value is not specified, then the value of C(user), or the environment
variable C(F5_USER) will be used.
type: str
peer_password:
description:
- The password of the API username of the remote peer device that you are
trusting. If this value is not specified, then the value of C(password),
or the environment variable C(F5_PASSWORD) will be used.
type: str
type:
description:
- Specifies whether the device you are adding is a Peer or a Subordinate.
The default is C(peer).
- The difference between the two is a matter of mitigating risk of
compromise.
- A subordinate device cannot sign a certificate for another device.
- In the case where the security of an authority device in a trust domain
is compromised, the risk of compromise is minimized for any subordinate
device.
- Designating devices as subordinate devices is recommended for device
groups with a large number of member devices, where the risk of compromise
is high.
type: str
choices:
- peer
- subordinate
default: peer
state:
description:
- When C(present), ensures the specified devices are trusted.
- When C(absent), removes the device trusts.
type: str
choices:
- absent
- present
default: present
extends_documentation_fragment: f5
author:
- Tim Rupp (@caphrim007)
s�
- name: Add trusts for all peer devices to Active device
bigip_device_trust:
peer_server: "{{ item.ansible_host }}"
peer_hostname: "{{ item.inventory_hostname }}"
peer_user: "{{ item.bigip_username }}"
peer_password: "{{ item.bigip_password }}"
provider:
server: lb.mydomain.com
user: admin
password: secret
loop: hostvars
when: inventory_hostname in groups['master']
delegate_to: localhost
s
peer_server:
description: The remote IP address of the trusted peer.
returned: changed
type: str
sample: 10.0.2.15
peer_hostname:
description: The remote hostname used to identify the trusted peer.
returned: changed
type: str
sample: test-bigip-02.localhost.localdomain
N( t
AnsibleModule( t F5RestClient( t
F5ModuleError( t AnsibleF5Parameters( t f5_argument_spec( t is_valid_ipt
Parametersc B` s� e Z i d d 6d d 6d d 6d d 6d d 6Z d
d d d d d g Z d d g Z g Z d � Z e d � � Z e d
� � Z e d � � Z
RS( t
peer_hostnamet
deviceNamet typet caDevicet peer_servert devicet peer_usert usernamet
peer_passwordt passwordt namec C` s] i } y>