ansible.builtin.cp_mgmt_global_assignment (v2.9.17) — module

Manages global-assignment objects on Check Point over Web Services API

| "added in version" 2.9 of ansible.builtin"

Authors: Or Soffer (@chkp-orso)

preview | supported by community

Install Ansible via pip

Install with pip install ansible==2.9.17

Description

Manages global-assignment objects on Check Point devices including creating, updating and removing objects.

All operations are performed over Web Services API.

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: add-global-assignment
  cp_mgmt_global_assignment:
    dependent_domain: domain2
    global_access_policy: standard
    global_domain: Global
    global_threat_prevention_policy: standard
    manage_protection_actions: true
    state: present
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: set-global-assignment
  cp_mgmt_global_assignment:
    dependent_domain: domain1
    global_domain: Global2
    global_threat_prevention_policy: ''
    manage_protection_actions: false
    state: present
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: delete-global-assignment
  cp_mgmt_global_assignment:
    dependent_domain: domain1
    global_domain: Global2
    state: absent

Inputs

    
state:
    choices:
    - present
    - absent
    default: present
    description:
    - State of the access rule (present or absent).
    type: str

version:
    description:
    - Version of checkpoint. If not given one, the latest version taken.
    type: str

details_level:
    choices:
    - uid
    - standard
    - full
    description:
    - The level of detail for some of the fields in the response can vary from showing
      only the UID value of the object to a fully detailed representation of the object.
    type: str

global_domain:
    description:
    - N/A
    type: str

ignore_errors:
    description:
    - Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings
      flag was omitted - warnings will also be ignored.
    type: bool

wait_for_task:
    default: true
    description:
    - Wait for the task to end. Such as publish task.
    type: bool

ignore_warnings:
    description:
    - Apply changes ignoring warnings.
    type: bool

dependent_domain:
    description:
    - N/A
    type: str

auto_publish_session:
    default: false
    description:
    - Publish the current session if changes have been performed after task completes.
    type: bool

global_access_policy:
    description:
    - Global domain access policy that is assigned to a dependent domain.
    type: str

wait_for_task_timeout:
    default: 30
    description:
    - How many minutes to wait until throwing a timeout error.
    type: int

manage_protection_actions:
    description:
    - N/A
    type: bool

global_threat_prevention_policy:
    description:
    - Global domain threat prevention policy that is assigned to a dependent domain.
    type: str

Outputs

cp_mgmt_global_assignment:
  description: The checkpoint object created or updated.
  returned: always, except when deleting the object.
  type: dict