DO 1.33 is broken - Failed to complete onboarding task. code: 422, message: invalid config - rolled back, error: one or more properties must be specified

[IkueMoto]

Environment

• Declarative Onboarding Version: 1.33
• BIG-IQ Version: 8.1.0.2

Summary

Unable to deploy DO declarations that had previously worked on older DO versions.
Issue appears to have been introduced in 1.33.

Steps To Reproduce

Steps to reproduce the behavior:

1. Submit the following declaration: { "class":"DO", "declaration": { "schemaVersion": "1.0.0", "class": "Device", "async": true, "Common": { "class": "Tenant", "hostname": "example.local" } }, "targetUsername": "admin", "targetHost": "x.x.x.x", "targetPassphrase": "admin", "targetTimeout": 90, "bigIqSettings": { "failImportOnConflict": false, "conflictPolicy": "USE_BIGIQ", "deviceConflictPolicy": "USE_BIGIP", "versionedConflictPolicy": "KEEP_VERSION" } }

2. Observe the following error response:

    {
        "id": "af03da4a-c3ef-4794-b830-2df9a9d83091",
        "selfLink": "https://localhost/mgmt/shared/declarative-onboarding/task/af03da4a-c3ef-4794-b830-2df9a9d83091",
        "code": 422,
        "status": "ERROR",
        "message": "failed",
        "errors": [
            "Failed to complete onboarding task. code: 422, message: invalid config - rolled back, error: one or more properties must be specified"
        ],
        "result": {
            "class": "Result",
            "code": 422,
            "status": "ERROR",
            "dryRun": false,
            "message": "failed",
            "errors": [
                "Failed to complete onboarding task. code: 422, message: invalid config - rolled back, error: one or more properties must be specified"
            ]
        },

Expected Behavior

A clear and concise description of what you expected to happen.

No breaking changes should be introduced in newer DO versions. DO declarations are expected to continue working in new DO versions.

Actual Behavior

A clear and concise description of what actually happens. Please include any applicable error output.

DO fails to deploy with the following errors in the logs:

BIG-IQ restnoded.log:

Tue, 11 Oct 2022 13:38:40 GMT - fine: [f5-declarative-onboarding: authHandler.js] Processing authentication declaration. Tue, 11 Oct 2022 13:38:40 GMT - finest: [f5-declarative-onboarding: restWorker.js] /tm/auth/tacacs/~Common~system-auth does not exist, creating Tue, 11 Oct 2022 13:38:40 GMT - fine: [f5-declarative-onboarding: restWorker.js] create 10.155.32.148 undefined {"name":"system-auth","partition":"Common","accounting":"send-to-first-server","authentication":"use-first-server"} Tue, 11 Oct 2022 13:38:41 GMT - finest: [f5-declarative-onboarding: restWorker.js] tryUntil: got error {"code":400} Tue, 11 Oct 2022 13:38:41 GMT - finest: [f5-declarative-onboarding: restWorker.js] typeof err object Tue, 11 Oct 2022 13:38:41 GMT - finer: [f5-declarative-onboarding: restWorker.js] tryUntil error: a value must be provided for "secret" attribute when creating "tacacs" tries left: 90 Tue, 11 Oct 2022 13:38:41 GMT - finest: [f5-declarative-onboarding: restWorker.js] tryUntil: retryOrReject: numRemaining: 90 , code: 400 , message: a value must be provided for "secret" attribute when creating "tacacs" Tue, 11 Oct 2022 13:38:41 GMT - finer: [f5-declarative-onboarding: restWorker.js] Unrecoverable error from HTTP request. Not retrying. Tue, 11 Oct 2022 13:38:41 GMT - severe: [f5-declarative-onboarding: authHandler.js] Error configuring remote TACACS auth: a value must be provided for "secret" attribute when creating "tacacs" Tue, 11 Oct 2022 13:38:41 GMT - fine: [f5-declarative-onboarding: restWorker.js] modify 10.155.32.148 /tm/auth/source {"type":"local","fallback":"false"} Tue, 11 Oct 2022 13:38:41 GMT - fine: [f5-declarative-onboarding: restWorker.js] {"kind":"tm:auth:source:sourcestate","selfLink":"https://localhost/mgmt/tm/auth/source?ver=16.1.3.1","fallback":"false","type":"local"} Tue, 11 Oct 2022 13:38:41 GMT - fine: [f5-declarative-onboarding: restWorker.js] modify 10.155.32.148 /tm/auth/remote-user {"defaultPartition":"all","defaultRole":"no-access","remoteConsoleAccess":"disabled"} Tue, 11 Oct 2022 13:38:41 GMT - fine: [f5-declarative-onboarding: restWorker.js] {"kind":"tm:auth:remote-user:remote-userstate","selfLink":"https://localhost/mgmt/tm/auth/remote-user?ver=16.1.3.1","defaultPartition":"all","defaultPartitionReference":{"link":"https://localhost/mgmt/tm/auth/partition/all?ver=16.1.3.1"},"defaultRole":"no-access","remoteConsoleAccess":"disabled"} Tue, 11 Oct 2022 13:38:41 GMT - fine: [f5-declarative-onboarding: restWorker.js] modify 10.155.32.148 /tm/auth/password-policy {} Tue, 11 Oct 2022 13:38:41 GMT - finest: [f5-declarative-onboarding: restWorker.js] tryUntil: got error {"code":400} Tue, 11 Oct 2022 13:38:41 GMT - finest: [f5-declarative-onboarding: restWorker.js] typeof err object Tue, 11 Oct 2022 13:38:41 GMT - finer: [f5-declarative-onboarding: restWorker.js] tryUntil error: one or more properties must be specified tries left: 90 Tue, 11 Oct 2022 13:38:41 GMT - finest: [f5-declarative-onboarding: restWorker.js] tryUntil: retryOrReject: numRemaining: 90 , code: 400 , message: one or more properties must be specified Tue, 11 Oct 2022 13:38:41 GMT - finer: [f5-declarative-onboarding: restWorker.js] Unrecoverable error from HTTP request. Not retrying. Tue, 11 Oct 2022 13:38:41 GMT - severe: [f5-declarative-onboarding: declarationHandler.js] Error processing declaration: one or more properties must be specified Tue, 11 Oct 2022 13:38:41 GMT - severe: [f5-declarative-onboarding: restWorker.js] Error onboarding: one or more properties must be specified Tue, 11 Oct 2022 13:38:41 GMT - info: [f5-declarative-onboarding: restWorker.js] Rolling back configuration

[sunitharonan]

Thank you. In order to prioritize and understand the issue better, please reach out to us at [email protected]