(Following up to my own post for posterity's sake, see xkcd.com/979.)

Short form: for me this isn't yet as easy as a file resource but the puppetized 
management payoff will be worth the work. My issues are most likely a 
reflection of my own puppet/ruby/iControl/SOAP skill.

I am going to explore a personalized set of F5 types/providers that I can use 
without first loading up the wsdl file for every involved iControl interface, 
version, and hotfix.



Points from my various BigIP/puppet experimentations:

a) The f5-icontrol-10.2.0.2.gem doesn't necessarily work with LTM 11.1.0. (Or I 
haven't figured it out, also quite likely.) This could be because the gem ships 
different wsdl files but I couldn't get it to work with later iControl wsdl 
files anyway.

b) In LTM 11, F5 deprecated some interfaces so puppet f5 module providers like 
f5_node are suddenly using deprecated interfaces.

c) Some parts of the iControl api are being updated/fixed over time, for 
instance the hotfix id 388590 reading "Certificates can now successfully be 
updated using the iControl Management::KeyCertificate interface", see:

http://support.f5.com/kb/en-us/solutions/public/14000/100/sol14175.html

d) Judging by my soap-newbie eye the soap4r package appears abandonware, savon 
isn't up to complicated data structures and I have yet to dive into handsoap 
(the starter page says to start with a wsdl, see my wsdl-tracking issues). 
Picking the right soap package to use is likely going to be job 1.

(If the list has any feedback to the above, I'm very much all ears.)


On Thu, Jan 17, 2013 at 05:07:36PM -0500, Christopher Wood wrote:
> On Thu, Jan 17, 2013 at 03:48:08PM -0600, Nan Liu wrote:
> >    On Thu, Jan 17, 2013 at 3:37 PM, Christopher Wood
> >    <[1]christopher_w...@pobox.com> wrote:
> > 
> >      Usually when I make a change via the gui or tmsh I see the change
> >      reflected in the text config right away.
> > 
> >    Good to know.
> >    �
> > 
> >      > � �If you run puppet again does it attempt to make the same changes
> >      again?
> > 
> >      Yes, it does.
> > 
> >    Interesting, what version of F5 are you using?
> 
> BIG-IP 11.1.0 Build 1943.0 Final 
> 
> Sounds like the f5-icontrol-10.2.0.2.gem could not work with that (unless 
> anybody here has a different experience). I'll file a case with F5 to ask 
> them.
> 
> >    If you trim the manifests down, isolate to just an iRule and enable
> >    --debug do you see this line:
> >    Puppet::Provider::F5_Rule: creating {rule_name}
> >    
> > [2]https://github.com/puppetlabs/puppetlabs-f5/blob/master/lib/puppet/provider/f5_rule/f5_rule.rb#L35
> 
> I do see these for both:
> 
> Debug: Puppet::Provider::F5_Node: creating F5 node 192.168.127.1
> Debug: Puppet::Provider::F5_Rule: creating cw1
> 
> Possibly time to go bother F5 about their gem.
> 
> >    Does this message show up? In most cases any failure will result in an
> >    appropriate SOAP error, so I'm curious if the transport should be
> >    investigated or the puppet version (since you mentioned 3.0.2).
> >    Thanks,
> >    Nan
> > 
> >    --
> >    You received this message because you are subscribed to the Google Groups
> >    "Puppet Users" group.
> >    To post to this group, send email to puppet-users@googlegroups.com.
> >    To unsubscribe from this group, send email to
> >    puppet-users+unsubscr...@googlegroups.com.
> >    For more options, visit this group at
> >    http://groups.google.com/group/puppet-users?hl=en.
> > 
> > References
> > 
> >    Visible links
> >    1. mailto:christopher_w...@pobox.com
> >    2. 
> > https://github.com/puppetlabs/puppetlabs-f5/blob/master/lib/puppet/provider/f5_rule/f5_rule.rb#L35
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Puppet Users" group.
> To post to this group, send email to puppet-users@googlegroups.com.
> To unsubscribe from this group, send email to 
> puppet-users+unsubscr...@googlegroups.com.
> For more options, visit this group at 
> http://groups.google.com/group/puppet-users?hl=en.
> 

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to