DataGroup not created yet AS3 response is 200

[alonsocamaro]

Environment

• Application Services Version: 3.55
• BIG-IP Version: 21.0.0

Summary

A request with a DataGroup is accepted but the data group is not created

Steps To Reproduce

Steps to reproduce the behavior:

1. Submit the following declaration:

{
    "class": "AS3",
    "targetHost": "xxx",
    "targetUsername": "admin",
    "targetPassphrase": "xxx",
    "declaration":{"class":"ADC","controls":{"archiveTimestamp":"2025-11-18T15:50:08.145Z","class":"Controls","userAgent":"CIS/v2.20.1 OCP/v4.19.7"},"f5-cis":{"Shared":{"class":"Application","https_ose_vserver":{"class":"Service_HTTP","layer4":"tcp","snat":"auto","source":"0.0.0.0/0","translateServerAddress":true,"translateServerPort":true,"virtualAddresses":["192.170.34.212"],"virtualPort":443},"openshift_flights_mcp_server_flights_mcp_server":{"class":"Pool","loadBalancingMode":"round-robin","members":[{"addressDiscovery":"static","serverAddresses":["10.128.0.201"],"servicePort":3001,"shareNodes":true},{"addressDiscovery":"static","serverAddresses":["10.130.0.251"],"servicePort":3001,"shareNodes":true}]},"openshift_insecure_routes":{"class":"Endpoint_Policy","rules":[{"actions":[{"event":"request","select":{"pool":{"use":"openshift_flights_mcp_server_flights_mcp_server"}},"type":"forward"}],"conditions":[{"all":{"operand":"equals","values":["flights-mcp-server.f5demo.com:80","flights-mcp-server.f5demo.com"]},"event":"request","name":"host","type":"httpHeader"}],"name":"osr_flights_mcp_server_flights_mcp_server"}],"strategy":"first-match"},"template":"shared","vs_mcp_openshift":{"class":"Service_HTTP","dataGroupRefInternal":{"class":"Data_Group","keyDataType":"string","name":"mcpBlockedTools","records":[{"key":"test","value":"test too"}],"storageType":"internal"},"layer4":"tcp","policyEndpoint":"/f5-cis/Shared/openshift_insecure_routes","snat":"auto","source":"0.0.0.0/0","translateServerAddress":true,"translateServerPort":true,"virtualAddresses":["192.170.34.212"],"virtualPort":80}},"class":"Tenant","defaultRouteDomain":0},"id":"urn:uuid:85626792-9ee7-46bb-8fc8-4ba708cfdc1d","label":"CIS Declaration","remark":"Auto-generated by CIS","schemaVersion":"3.52.0","updateMode":"selective"}
}

2. Observe the following non error response:

{"results":[{"code":200,"message":"success","lineCount":23,"host":"192.170.32.210","tenant":"f5-cis","runTime":3867,"declarationId":"urn:uuid:85626792-9ee7-46bb-8fc8-4ba708cfdc1d"}],"declaration":{"f5-cis":{"Shared":{"class":"Application","https_ose_vserver":{"class":"Service_HTTP","layer4":"tcp","snat":"auto","source":"0.0.0.0/0","translateServerAddress":true,"translateServerPort":true,"virtualAddresses":["192.170.34.212"],"virtualPort":443},"openshift_flights_mcp_server_flights_mcp_server":{"class":"Pool","loadBalancingMode":"round-robin","members":[{"addressDiscovery":"static","serverAddresses":["10.128.0.201"],"servicePort":3001,"shareNodes":true},{"addressDiscovery":"static","serverAddresses":["10.130.0.251"],"servicePort":3001,"shareNodes":true}]},"openshift_insecure_routes":{"class":"Endpoint_Policy","rules":[{"actions":[{"event":"request","select":{"pool":{"use":"openshift_flights_mcp_server_flights_mcp_server"}},"type":"forward"}],"conditions":[{"all":{"operand":"equals","values":["flights-mcp-server.f5demo.com:80","flights-mcp-server.f5demo.com"]},"event":"request","name":"host","type":"httpHeader"}],"name":"osr_flights_mcp_server_flights_mcp_server"}],"strategy":"first-match"},"template":"shared","vs_mcp_openshift":{"class":"Service_HTTP","dataGroupRefInternal":{"class":"Data_Group","keyDataType":"string","name":"mcpBlockedTools","records":[{"key":"test","value":"test too"}],"storageType":"internal"},"layer4":"tcp","policyEndpoint":"/f5-cis/Shared/openshift_insecure_routes","snat":"auto","source":"0.0.0.0/0","translateServerAddress":true,"translateServerPort":true,"virtualAddresses":["192.170.34.212"],"virtualPort":80}},"class":"Tenant","defaultRouteDomain":0},"class":"ADC","controls":{"archiveTimestamp":"2025-11-18T16:14:06.216Z","class":"Controls","userAgent":"CIS/v2.20.1 OCP/v4.19.7"},"id":"urn:uuid:85626792-9ee7-46bb-8fc8-4ba708cfdc1d","label":"CIS Declaration","remark":"Auto-generated by CIS","schemaVersion":"3.52.0","updateMode":"selective"}}

But the resulting configuration doesn´t contain the data-group:

root@(bigip21)(cfg-sync Standalone)(Active)(/)(tmos)# cd /f5-cis
root@(bigip21)(cfg-sync Standalone)(Active)(/f5-cis)(tmos)# list ltm data-group recursive
root@(bigip21)(cfg-sync Standalone)(Active)(/f5-cis)(tmos)# 

All other configuration is created as expected.

Expected Behavior

The data-groups to be created

Actual Behavior

The data-groups are not created, the virtual server and pools are created just fine.

[mdditt2000]

@alonsocamaro, please request the customer to create an SR and share the # with me for planning. TY

[alonsocamaro]

@mdditt2000 This was not found in a customer