catalystwan 0.34.0.dev1__tar.gz → 0.34.0.dev3__tar.gz

{catalystwan-0.34.0.dev1 → catalystwan-0.34.0.dev3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: catalystwan
-Version: 0.34.0.dev1
+Version: 0.34.0.dev3
 Summary: Cisco Catalyst WAN SDK for Python
 Home-page: https://github.com/cisco-open/cisco-catalyst-wan-sdk
 Author: kagorski

{catalystwan-0.34.0.dev1 → catalystwan-0.34.0.dev3}/catalystwan/models/configuration/feature_profile/sdwan/application_priority/traffic_policy.py

@@ -1,9 +1,18 @@
 # Copyright 2024 Cisco Systems, Inc. and its affiliates
 from ipaddress import IPv4Address, IPv4Network, IPv6Address, IPv6Network
-from typing import List, Literal, Optional, Tuple, Type, TypeVar, Union, overload
+from typing import Any, Dict, List, Literal, Optional, Tuple, Type, TypeVar, Union, overload
 from uuid import UUID
 
-from pydantic import AliasPath, BaseModel, ConfigDict, Field, field_validator
+from pydantic import (
+    AliasPath,
+    BaseModel,
+    ConfigDict,
+    Field,
+    SerializationInfo,
+    SerializerFunctionWrapHandler,
+    field_validator,
+    model_serializer,
+)
 from typing_extensions import Annotated
 
 from catalystwan.api.configuration_groups.parcel import Global, _ParcelBase, as_global, as_optional_global
@@ -477,16 +486,20 @@ class LossCorrection(BaseModel):
 
 class Nat(BaseModel):
     model_config = ConfigDict(populate_by_name=True, extra="forbid")
-    bypass: Optional[Global[bool]] = Field(default=None)
-    dia_interface: Optional[Global[List[str]]] = Field(
+    bypass: Annotated[Optional[Global[bool]], VersionedField(versions="<20.14", forbidden=True)] = Field(default=None)
+    dia_interface: Annotated[Optional[Global[List[str]]], VersionedField(versions="<20.14", forbidden=True)] = Field(
         default=None, validation_alias="diaInterface", serialization_alias="diaInterface"
     )
-    dia_pool: Optional[Global[List[int]]] = Field(
+    dia_pool: Annotated[Optional[Global[List[int]]], VersionedField(versions="<20.14", forbidden=True)] = Field(
         default=None, validation_alias="diaPool", serialization_alias="diaPool"
     )
     fallback: Optional[Global[bool]] = Field(default=None)
     use_vpn: Global[bool] = Field(default=None, validation_alias="useVpn", serialization_alias="useVpn")
 
+    @model_serializer(mode="wrap", when_used="json")
+    def serialize(self, handler: SerializerFunctionWrapHandler, info: SerializationInfo) -> Dict[str, Any]:
+        return VersionedField.dump(self.model_fields, handler(self), info)
+
 
 SecureServiceEdgeInstance = Literal[
     "Cisco-Secure-Access",
@@ -950,13 +963,13 @@ class Sequence(BaseModel):
         self._insert_action(LossCorrectionAction(loss_correction=loss_correction))
 
     def associate_nat_action(
-        self, bypass: bool, dia_interface: List[str], dia_pool: List[int], fallback: bool, use_vpn: bool
+        self, bypass: bool, dia_interface: List[str], dia_pool: List[int], fallback: Optional[bool], use_vpn: bool
     ) -> None:
         nat = Nat(
             bypass=as_global(bypass),
             dia_interface=as_global(dia_interface) if dia_interface else None,
             dia_pool=as_global(dia_pool) if dia_pool else None,
-            fallback=as_global(fallback),
+            fallback=as_optional_global(fallback),
             use_vpn=as_global(use_vpn),
         )
         self._insert_action(NatAction(nat=nat))

{catalystwan-0.34.0.dev1 → catalystwan-0.34.0.dev3}/catalystwan/models/configuration/feature_profile/sdwan/service/lan/ethernet.py

@@ -1,13 +1,23 @@
 # Copyright 2024 Cisco Systems, Inc. and its affiliates
 
 from ipaddress import IPv4Address
-from typing import List, Literal, Optional, Union
+from typing import Any, Dict, List, Literal, Optional, Union
 from uuid import UUID
 
-from pydantic import AliasPath, BaseModel, ConfigDict, Field
+from pydantic import (
+    AliasChoices,
+    AliasPath,
+    BaseModel,
+    ConfigDict,
+    Field,
+    SerializationInfo,
+    SerializerFunctionWrapHandler,
+    model_serializer,
+)
+from typing_extensions import Annotated
 
 from catalystwan.api.configuration_groups.parcel import Default, Global, Variable, _ParcelBase
-from catalystwan.models.common import EthernetDuplexMode, MediaType
+from catalystwan.models.common import EthernetDuplexMode, MediaType, VersionedField
 from catalystwan.models.configuration.feature_profile.common import (
     Arp,
     DynamicDhcpDistance,
@@ -93,7 +103,10 @@ class VrrpIPv6(BaseModel):
 class VrrpIPv4(BaseModel):
     model_config = ConfigDict(arbitrary_types_allowed=True, populate_by_name=True, extra="forbid")
 
-    group_id: Union[Variable, Global[int]] = Field(serialization_alias="groupId", validation_alias="groupId")
+    group_id: Annotated[
+        Union[Variable, Global[int]],
+        VersionedField(versions="<=20.12", serialization_alias="group_id"),
+    ] = Field(serialization_alias="groupId", validation_alias=AliasChoices("groupId", "group_id"))
     priority: Union[Variable, Global[int], Default[int]] = Default[int](value=100)
     timer: Union[Variable, Global[int], Default[int]] = Default[int](value=1000)
     track_omp: Union[Global[bool], Default[bool]] = Field(
@@ -117,26 +130,43 @@ class VrrpIPv4(BaseModel):
         serialization_alias="trackingObject", validation_alias="trackingObject", default=None
     )
 
+    @model_serializer(mode="wrap", when_used="json")
+    def serialize(self, handler: SerializerFunctionWrapHandler, info: SerializationInfo) -> Dict[str, Any]:
+        return VersionedField.dump(self.model_fields, handler(self), info)
+
 
 class Trustsec(BaseModel):
     model_config = ConfigDict(arbitrary_types_allowed=True, populate_by_name=True, extra="forbid")
 
-    enable_sgt_propagation: Union[Global[bool], Default[bool]] = Field(
+    enable_sgt_propagation: Annotated[
+        Union[Global[bool], Default[bool]],
+        VersionedField(versions="<=20.12", serialization_alias="enableSGTPropogation"),
+    ] = Field(
         serialization_alias="enableSGTPropagation",
-        validation_alias="enableSGTPropagation",
+        validation_alias=AliasChoices("enableSGTPropagation", "enableSGTPropogation"),
         default=Default[bool](value=False),
     )
-    propagate: Optional[Union[Global[bool], Default[bool]]] = Default[bool](value=True)
+    propagate: Annotated[
+        Optional[Union[Global[bool], Default[bool]]], VersionedField(versions="<=20.12", forbidden=True)
+    ] = Default[bool](value=True)
     security_group_tag: Optional[Union[Global[int], Variable, Default[None]]] = Field(
         serialization_alias="securityGroupTag", validation_alias="securityGroupTag", default=None
     )
-    enable_enforced_propagation: Union[Global[bool], Default[None]] = Field(
-        serialization_alias="enableEnforcedPropagation", validation_alias="enableEnforcedPropagation"
+    enable_enforced_propagation: Annotated[
+        Union[Global[bool], Default[None]],
+        VersionedField(versions="<=20.12", serialization_alias="enableEnforcedPropogation"),
+    ] = Field(
+        serialization_alias="enableEnforcedPropagation",
+        validation_alias=AliasChoices("enableEnforcedPropagation", "enableEnforcedPropogation"),
     )
     enforced_security_group_tag: Union[Global[int], Variable, Default[None]] = Field(
         serialization_alias="enforcedSecurityGroupTag", validation_alias="enforcedSecurityGroupTag"
     )
 
+    @model_serializer(mode="wrap", when_used="json")
+    def serialize(self, handler: SerializerFunctionWrapHandler, info: SerializationInfo) -> Dict[str, Any]:
+        return VersionedField.dump(self.model_fields, handler(self), info)
+
 
 class AdvancedEthernetAttributes(BaseModel):
     model_config = ConfigDict(arbitrary_types_allowed=True, populate_by_name=True, extra="forbid")

{catalystwan-0.34.0.dev1 → catalystwan-0.34.0.dev3}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "catalystwan"
-version = "0.34.0dev1"
+version = "0.34.0dev3"
 description = "Cisco Catalyst WAN SDK for Python"
 authors = ["kagorski <kagorski@cisco.com>"]
 readme = "README.md"

{catalystwan-0.34.0.dev1 → catalystwan-0.34.0.dev3}/setup.py

@@ -57,29 +57,12 @@ packages = \
  'catalystwan.models.policy.definition',
  'catalystwan.models.policy.list',
  'catalystwan.tests',
- 'catalystwan.tests.config_migration',
- 'catalystwan.tests.config_migration.policy_converters',
- 'catalystwan.tests.config_migration.test_data',
- 'catalystwan.tests.config_migration.test_data.feature_templates',
- 'catalystwan.tests.config_migration.test_data.localized_policies',
- 'catalystwan.tests.config_migration.test_data.policy_definitions',
  'catalystwan.tests.models',
  'catalystwan.tests.templates',
  'catalystwan.tests.templates.definitions',
  'catalystwan.tests.templates.definitions.basic',
  'catalystwan.tests.templates.models',
  'catalystwan.utils',
- 'catalystwan.utils.config_migration',
- 'catalystwan.utils.config_migration.converters',
- 'catalystwan.utils.config_migration.converters.feature_template',
- 'catalystwan.utils.config_migration.converters.feature_template.lan',
- 'catalystwan.utils.config_migration.converters.feature_template.wan',
- 'catalystwan.utils.config_migration.converters.policy',
- 'catalystwan.utils.config_migration.creators',
- 'catalystwan.utils.config_migration.creators.strategy',
- 'catalystwan.utils.config_migration.factories',
- 'catalystwan.utils.config_migration.reverters',
- 'catalystwan.utils.config_migration.steps',
  'catalystwan.utils.feature_template',
  'catalystwan.workflows']
 
@@ -87,7 +70,6 @@ package_data = \
 {'': ['*'],
  'catalystwan.api.templates.payloads.aaa': ['feature/*'],
  'catalystwan.api.templates.payloads.cisco_vpn': ['feature/*'],
- 'catalystwan.models.configuration': ['docs/*'],
  'catalystwan.tests.templates': ['schemas/*', 'schemas/basic/*']}
 
 install_requires = \
@@ -106,7 +88,7 @@ install_requires = \
 
 setup_kwargs = {
     'name': 'catalystwan',
-    'version': '0.34.0.dev1',
+    'version': '0.34.0.dev3',
     'description': 'Cisco Catalyst WAN SDK for Python',
     'long_description': '<p align="center">\n  <a href="#"><img src="docs/images/catalystwan.svg" alt="Cisco Catalyst WAN SDK Logo" style="height:150px" />\n</p>\n\n[![Python-Supported](https://img.shields.io/static/v1?label=Python&logo=Python&color=3776AB&message=3.8%20|%203.9%20|%203.10%20|%203.11%20|%203.12)](https://www.python.org/)\n\nCisco Catalyst WAN SDK is a package for creating simple and parallel automatic requests via official SD-WAN Manager API. It is intended to serve as a multiple session handler (provider, provider as a tenant, tenant). The library is not dependent on environment which is being run in, you just need a connection to any SD-WAN Manager.\n\n## Important Notice: Early Beta Release\n\nWelcome to the Cisco Catalyst WAN SDK!\n\nWe are thrilled to announce that Cisco Catalyst WAN SDK is now available in early beta. This is an exciting step forward in enabling developers to harness the full potential of Cisco\'s networking solutions.  Please be aware that, as an early beta release, this version of the SDK is still undergoing development and testing. As such, it is provided "as is" and support to address any issues are limited and best effort.\n\n## Not recommend to use in production environments.\nWe encourage developers to explore and test the SDK\'s capabilities, but please exercise caution when using it in production environments.  We are dedicated to improving the Cisco Catalyst WAN SDK and we value your input. Your feedback is crucial to us-it will guide us in refining and enhancing the SDK to better meet your needs.\nTo report any issues, share your insights, or suggest improvements, please visit our Issues page on GitHub or reach out to us through the provided communication channels.\n\nThank you for being a part of our development journey!\n\n## Installation\n```console\npip install catalystwan\n```\n\n## Manager Session\nIn order to execute SDK APIs **ManagerSession** needs to be created. The fastest way to get started is to use `create_manager_session()` method which configures session, performs authentication for given credentials and returns **ManagerSession** instance in operational state. **ManagerSession** provides a collection of supported APIs in `api` instance variable.\nPlease check example below:\n\n```python\nfrom catalystwan.session import create_manager_session\n\nurl = "example.com"\nusername = "admin"\npassword = "password123"\n\nwith create_manager_session(url=url, username=username, password=password) as session:\n    devices = session.api.devices.get()\n    print(devices)\n```\n**ManagerSession** extends [requests.Session](https://requests.readthedocs.io/en/latest/user/advanced/#session-objects) so all functionality from [requests](https://requests.readthedocs.io/en/latest/) library is avaiable to user, it also implements python [contextmanager](https://docs.python.org/3.8/library/contextlib.html#contextlib.contextmanager) and automatically frees server resources on exit.\n\n<details>\n    <summary> <b>Configure Manager Session before using</b> <i>(click to expand)</i></summary>\n\nIt is possible to configure **ManagerSession** prior sending any request.\n\n```python\nfrom catalystwan.session import ManagerSession\n\nurl = "example.com"\nusername = "admin"\npassword = "password123"\n\n# configure session using constructor - nothing will be sent to target server yet\nsession = ManagerSession(url=url, username=username, password=password)\n# login and send requests\nsession.login()\nsession.get("/dataservice/device")\nsession.close()\n```\nWhen interacting with the SDWAN Manager API without using a context manager, it\'s important \nto manually execute the `close()` method to release the user session resource.\nEnsure that the `close()` method is called after you have finished using the session to maintain optimal resource management and avoid potential errors.\n\n</details>\n\n<details>\n    <summary> <b>Login as Tenant</b> <i>(click to expand)</i></summary>\n\nTenant domain needs to be provided in url together with Tenant credentials.\n\n```python\nfrom catalystwan.session import create_manager_session\n\nurl = "tenant.example.com"\nusername = "tenant_user"\npassword = "password123"\n\nwith create_manager_session(url=url, username=username, password=password) as session:\n    print(session.session_type)\n```\n\n</details>\n\n<details>\n    <summary> <b>Login as Provider-as-Tenant</b> <i>(click to expand)</i></summary>\n\nTenant `subdomain` needs to be provided as additional argument together with Provider credentials.\n\n```python\nfrom catalystwan.session import create_manager_session\n\nurl = "example.com"\nusername = "provider"\npassword = "password123"\nsubdomain = "tenant.example.com"\n\nwith create_manager_session(url=url, username=username, password=password, subdomain=subdomain) as session:\n    print(session.session_type)\n```\n\n</details>\n\n\n\n## API usage examples\nAll examples below assumes `session` variable contains logged-in [Manager Session](#Manager-Session) instance.\n\n<details>\n    <summary> <b>Get devices</b> <i>(click to expand)</i></summary>\n\n```python\ndevices = session.api.devices.get()\n```\n\n</details>\n\n<details>\n    <summary> <b>Admin Tech</b> <i>(click to expand)</i></summary>\n\n```Python\nadmin_tech_file = session.api.admin_tech.generate("172.16.255.11")\nsession.api.admin_tech.download(admin_tech_file)\nsession.api.admin_tech.delete(admin_tech_file)\n```\n</details>\n\n<details>\n    <summary> <b>Speed test</b> <i>(click to expand)</i></summary>\n\n```python\ndevices = session.api.devices.get()\nspeedtest = session.api.speedtest.speedtest(devices[0], devices[1])\n```\n\n</details>\n\n<details>\n    <summary> <b>Upgrade device</b> <i>(click to expand)</i></summary>\n\n```python\n# Prepare devices list\ncontrollers = session.endpoints.configuration_device_inventory.get_device_details(\'controllers\')\nvsmarts = controllers.filter(personality=Personality.VSMART)\nimage = "viptela-20.7.2-x86_64.tar.gz"\n\n# Upload image\nsession.api.repository.upload_image(image)\n\n# Install software\n\ninstall_task = session.api.software.install(devices=vsmarts, image=image)\n\n# Check action status\ninstall_task.wait_for_completed()\n```\n\n</details>\n\n<details>\n    <summary> <b>Get alarms</b> <i>(click to expand)</i></summary>\nTo get all alarms:\n\n```python\nalarms = session.api.alarms.get()\n```\n\nTo get all not viewed alarms:\n\n```python\nnot_viewed_alarms = session.api.alarms.get().filter(viewed=False)\n```\n\nTo get all alarms from past `n` hours:\n\n```python\nn = 24\nalarms_from_n_hours = session.api.alarms.get(from_time=n)\n```\n\nTo get all critical alarms from past `n` hours:\n\n```python\nfrom catalystwan.utils.alarm_status import Severity\nn = 48\ncritical_alarms = session.api.alarms.get(from_time=n).filter(severity=Severity.CRITICAL)\n```\n\n</details>\n\n<details>\n    <summary> <b>Users</b> <i>(click to expand)</i></summary>\n\n```python\n# Get all users\nsession.api.users.get()\n\n# Create user\nfrom catalystwan.endpoints.administration_user_and_group import User\nnew_user = User(username="new_user", password="new_user", group=["netadmin"], description="new user")\nsession.api.users.create(new_user)\n\n# Update user data\nnew_user_update = UserUpdateRequest(username="new_user", group=["netadmin", "netops"], locale="en_US", description="updated-new_user-description")\nsession.api.users.update(new_user_update)\n\n# Update user password\nsession.api.users.update_password("new_user", "n3W-P4s$w0rd")\n\n# Reset user\nsession.api.users.reset("new_user")\n\n# Delete user\nsession.api.users.delete("new_user")\n\n# Get current user authentication type and role\nsession.api.users.get_auth_type()\nsession.api.users.get_role()\n```\n\n</details>\n\n<details>\n    <summary> <b>User Groups</b> <i>(click to expand)</i></summary>\n\n```python\n# Get all user groups\nsession.api.user_groups.get()\n\n# Create user group\ngroup = UserGroup("new_user_group", [])\ngroup.enable_read({"Audit Log", "Alarms"})\ngroup.enable_read_and_write({"Device Inventory"})\nsession.api.user_groups.create(group)\n\n# Update user group\ngroup.disable({"Alarms"})\nsession.api.user_groups.update(group)\n\n# Delete user group\nsession.api.user_groups.delete(group.group_name)\n```\n\n</details>\n\n</details>\n\n<details>\n    <summary> <b>Sessions</b> <i>(click to expand)</i></summary>\n\n```python\n# Get all active sessions\nactive_sessions = session.api.sessions.get()\n\n# Invalidate sessions for given user\nnew_user_sessions = active_sessions.filter(raw_username="new_user")\nsession.api.sessions.invalidate(new_user_sessions)\n```\n\n</details>\n\n<details>\n    <summary> <b>Resource Groups</b> <i>(click to expand)</i></summary>\n\n```python\n# get resource groups\nsession.api.resource_groups.get()\n\n# create resource group\nnew_resource_group = ResourceGroup(\n    name="new_resource_group",\n    desc="Custom Resource Group #1",\n    siteIds=[]\n)\nsession.api.resource_groups.create(new_resource_group)\n\n# update resource group\nresource_group = session.api.resource_groups.get().filter(name="new_resource_group").single_or_default()\nupdated_resource_group = ResourceGroupUpdateRequest(\n    id=resource_group.id,\n    name=resource_group.name,\n    desc="Custom Resource Group #1 with updated description and site ids",\n    siteIds=[200]\n)\n\n# switch to resource group view\nsession.api.resource_groups.switch("new_resource_group")\n\n# delete resource group\nsession.api.resource_groups.delete(resource_group.id)\n```\n\n</details>\n\n<details>\n    <summary> <b>Tenant management</b> <i>(click to expand)</i></summary>\n\n```python\napi = session.api.tenant_management\n# create tenants\ntenants = [\n    Tenant(\n        name="tenant1",\n        org_name="CiscoDevNet",\n        subdomain="alpha.bravo.net",\n        desc="This is tenant for unit tests",\n        edge_connector_enable=True,\n        edge_connector_system_ip="172.16.255.81",\n        edge_connector_tunnel_interface_name="GigabitEthernet1",\n        wan_edge_forecast=1,\n    )\n]\ncreate_task = api.create(tenants)\ncreate_task.wait_for_completed()\n# list all tenants\ntenants_data = api.get_all()\n# pick tenant from list by name\ntenant = tenants_data.filter(name="tenant1").single_or_default()\n# get selected tenant id\ntenant_id = tenant.tenant_id\n# get vsession id of selected tenant\nvsessionid = api.vsession_id(tenant_id)\n# delete tenant by ids\ndelete_task = api.delete([tenant_id])\ndelete_task.wait_for_completed()\n# others\napi.get_hosting_capacity_on_vsmarts()\napi.get_statuses()\napi.get_vsmart_mapping()\n```\n</details>\n\n<details>\n    <summary> <b>Tenant migration</b> <i>(click to expand)</i></summary>\n\n```python\nfrom pathlib import Path\nfrom catalystwan.session import create_manager_session\nfrom catalystwan.models.tenant import TenantExport\nfrom catalystwan.workflows.tenant_migration import migration_workflow\n\ntenant = TenantExport(\n    name="mango",\n    desc="Mango tenant description",\n    org_name="Provider Org-Mango Inc",\n    subdomain="mango.fruits.com",\n    wan_edge_forecast=100,\n    migration_key="MangoTenantMigrationKey",   # only for SDWAN Manager >= 20.13\n    is_destination_overlay_mt=True,            # only for SDWAN Manager >= 20.13\n)\n\nwith create_manager_session(url="10.0.1.15", username="st-admin", password="") as origin_session, \\\n     create_manager_session(url="10.9.0.16", username="mt-provider-admin", password="") as target_session:\n    migration_workflow(\n        origin_session=origin_session,\n        target_session=target_session,\n        workdir=Path("workdir"),\n        tenant=tenant,\n        validator="10.9.12.26"\n    )\n```\n\n`migration_workflow` performs multi-step migration procedure according to [Migrate Single-Tenant Cisco SD-WAN Overlay to Multitenant Cisco SD-WAN Deployment](https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/system-interface/vedge-20-x/systems-interfaces-book/sdwan-multitenancy.html#concept_sjj_jmm_z4b)\n\n\nSince 20.13 also MT to ST is supported (just provide suitable origin/target sessions, and `is_destination_overlay_mt` parameter)\n\n\nEach step of the `migration_workflow` procedure can be executed independently using api methods: `export_tenant`, `download`, `import_tenant`, `store_token`, `migrate_network`\n\n```python\norigin_api = origin_session.api.tenant_migration_api\ntarget_api = target_session.api.tenant_migration_api\ntenant_file = Path("~/tenant.tar.gz")\ntoken_file = Path("~/tenant-token.txt")\n# export\nexport_task = origin_api.export_tenant(tenant=tenant)\nremote_filename = export_task.wait_for_file()\n# download\norigin_api.download(export_path, remote_filename)\n# import\nimport_task = target_api.import_tenant(export_path, tenant.migration_key)\nimport_task.wait_for_completed()\n# get token\nmigration_id = import_task.import_info.migration_token_query_params.migration_id\ntarget_api.store_token(migration_id, token_path)\n# migrate network\nmigrate_task = origin_api.migrate_network(token_path)\nmigrate_task.wait_for_completed()\n```\n</details>\n\n<details>\n    <summary> <b>Feature Templates</b> <i>(click to expand)</i></summary>\n\n```python\nfrom catalystwan.api.templates.models.omp_vsmart_model import OMPvSmart\n\nomp_vsmart = OMPvSmart(\n    name="my_first_template",\n    description="NA",\n    device_models=["vsmart"]\n\n)\n\nsession.api.templates.create(omp_vsmart)\n```\n\nMore details about how to use and how to add new: [Feature Templates README.md](https://github.com/cisco-open/cisco-catalyst-wan-sdk/blob/main/catalystwan/api/templates/README.md)\n</details>\n\n### Note:\nTo remove `InsecureRequestWarning`, you can include in your scripts (warning is suppressed when `catalystwan_devel` environment variable is set):\n```Python\nimport urllib3\nurllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)\n```\n\n## Catching Exceptions\n```python\ntry:\n    session.api.users.delete("bogus-user-name")\nexcept ManagerHTTPError as error:\n    # Process an error.\n    print(error.response.status_code)\n    print(error.info.code)\n    print(error.info.message)\n    print(error.info.details)\n\n```\n\n## [Supported API endpoints](https://github.com/cisco-open/cisco-catalyst-wan-sdk/blob/main/ENDPOINTS.md)\n\n## [Contributing, bug reporting and feature requests](https://github.com/cisco-open/cisco-catalyst-wan-sdk/blob/main/CONTRIBUTING.md)\n\n## Seeking support\n\nYou can contact us by submitting [issues](https://github.com/cisco-open/cisco-catalyst-wan-sdk/issues), or directly via mail on catalystwan@cisco.com.\n',
     'author': 'kagorski',

catalystwan-0.34.0.dev1/catalystwan/integration_tests/test_migration_flow.py

@@ -1,339 +0,0 @@
-# Copyright 2024 Cisco Systems, Inc. and its affiliates
-
-
-from ipaddress import IPv4Interface
-from typing import Dict, List
-from uuid import UUID
-
-from catalystwan.api.templates.device_template.device_template import DeviceTemplate
-from catalystwan.api.templates.feature_template import FeatureTemplate
-from catalystwan.api.templates.models.cisco_secure_internet_gateway import (
-    CiscoSecureInternetGatewayModel,
-    Interface,
-    InterfacePair,
-    Service,
-    Tracker,
-)
-from catalystwan.integration_tests.base import TestCaseBase, create_name_with_run_id
-from catalystwan.models.policy.definition.aip import (
-    AdvancedInspectionProfileDefinition,
-    AdvancedInspectionProfilePolicy,
-)
-from catalystwan.models.policy.definition.dns_security import DnsSecurityDefinition, DnsSecurityPolicy
-from catalystwan.models.policy.definition.intrusion_prevention import (
-    IntrusionPreventionDefinition,
-    IntrusionPreventionPolicy,
-)
-from catalystwan.models.policy.definition.qos_map import QoSMapPolicy
-from catalystwan.models.policy.definition.zone_based_firewall import ZoneBasedFWPolicy
-from catalystwan.models.policy.list.class_map import ClassMapList
-from catalystwan.models.policy.list.local_domain import LocalDomainList
-from catalystwan.models.policy.list.umbrella_data import UmbrellaDataList
-from catalystwan.models.policy.localized import LocalizedPolicy, LocalizedPolicySettings
-from catalystwan.models.policy.policy_definition import Reference
-from catalystwan.models.policy.security import UnifiedSecurityPolicy
-from catalystwan.utils.config_migration.runner import ConfigMigrationRunner
-
-
-class TestMigrationFlow(TestCaseBase):
-    runner: ConfigMigrationRunner
-
-    @classmethod
-    def setUpClass(cls) -> None:
-        super().setUpClass()
-        cls.runner = ConfigMigrationRunner.collect_push_and_rollback(cls.session)
-        cls.runner.run()
-
-    def test_collect_artefact(self):
-        # Arrange
-        ux1_config = self.runner.load_collected_config()
-        # Act, Assert
-        assert ux1_config
-
-    def test_transform_artefact(self):
-        # Arrange
-        transform_result = self.runner.load_transform_result()
-        # Act, Assert
-        assert transform_result.failed_items == list()
-
-    def test_push_artefact(self):
-        # Arrange
-        push_result = self.runner.load_push_result()
-        # Act, Assert
-        assert push_result.report.failed_push_parcels == list()
-
-    @classmethod
-    def tearDownClass(cls) -> None:
-        cls.runner.clear_ux2()
-        super().tearDownClass()
-
-
-COPY_DEVICE_TEMPLATE_FROM = "Factory_Default_C8000V_V01"
-
-
-class TestPolicyGroupAggregation(TestCaseBase):
-    runner: ConfigMigrationRunner
-    sig_name: str
-    sig_uuid: str
-    device_template_name: str
-    device_template_uuid: str
-    pol_dict: Dict[str, UUID]
-    localized_policy_name: str
-    security_policy_name: str
-    dns_security_name: str
-    queue_names: List[str]
-    qos_map_name: str
-
-    @classmethod
-    def setUpClass(cls) -> None:
-        super().setUpClass()
-        cls.pol_dict = {}
-        cls.queue_names = ["VOICE", "CRITICAL_DATA", "BULK", "DEFAULT", "INTERACTIVE_VIDEO", "CONTROL_SIGNALING"]
-        cls.sig_name = create_name_with_run_id("SIG")
-        cls.localized_policy_name = create_name_with_run_id("LocalizedPolicy")
-        cls.security_policy_name = create_name_with_run_id("SecurityPolicy")
-        cls.dns_security_name = create_name_with_run_id("DnsSecurity")
-        cls.qos_map_name = create_name_with_run_id("QosMapPolicy")
-        cls.device_template_name = create_name_with_run_id("DeviceTemplate_to_PolicyGroup")
-        cls.runner = ConfigMigrationRunner.collect_push_and_rollback(cls.session)
-        cls.runner.set_dump_prefix("aggregation")
-        cls.runner.set_filters(
-            dt_filter=cls.device_template_name,
-            lp_filter=cls.localized_policy_name,
-            sp_filter=cls.security_policy_name,
-        )
-
-    def test_policy_groups_aggregation(self):
-        """Test Policy Group Aggregation
-
-        When:
-        UX1.0: Device Template has associated a SIG Feature Template, Security Policy and Localized Policy
-
-        Expect:
-        UX2.0: Policy Group with associated SIG, Application Priority & SLA, Security, DNS Security Feature Profiles
-        """
-        # Arrange
-        self._create_sig_feature_template()
-        self._create_localized_policy()
-        self._create_security_policy()
-        self._create_device_template()
-        # Act
-        self.runner.run()
-        push_result = self.runner.load_push_result()
-        # Assert
-        assert len(push_result.report.policy_groups) == 1
-        policy_group = push_result.report.policy_groups[0]
-        assert policy_group.name.startswith(self.device_template_name)
-        feature_profiles = policy_group.feature_profiles
-        assert len([fp for fp in feature_profiles if fp.profile_name.startswith(self.sig_name)]) == 1
-        assert len([fp for fp in feature_profiles if fp.profile_name.startswith(self.localized_policy_name)]) == 1
-        assert len([fp for fp in feature_profiles if fp.profile_name.startswith(self.security_policy_name)]) == 1
-        assert len([fp for fp in feature_profiles if fp.profile_name.startswith(self.dns_security_name)]) == 1
-
-    def _create_device_template(self) -> None:
-        templates = self.session.api.templates
-        dt = DeviceTemplate.get(COPY_DEVICE_TEMPLATE_FROM, self.session)
-        dt.template_name = self.device_template_name
-        dt.factory_default = False
-        dt.associate_feature_template(CiscoSecureInternetGatewayModel.type, UUID(self.sig_uuid))
-        dt.associate_policy(self.pol_dict["Localized-Policy"])
-        dt.associate_security_policy(self.pol_dict["UnifiedSecurityPolicy"])
-        self.device_template_uuid = templates.create(dt)
-
-    def _create_sig_feature_template(self) -> None:
-        templates = self.session.api.templates
-        cisco_sig = CiscoSecureInternetGatewayModel(
-            template_name=self.sig_name,
-            template_description="Comprehensive CiscoSecureInternetGateway Configuration",
-            vpn_id=10,
-            child_org_id="example_org",
-            interface=[
-                Interface(
-                    if_name="ipsec255",
-                    auto=True,
-                    shutdown=False,
-                    description="Main interface for SIG",
-                    unnumbered=False,
-                    address=IPv4Interface("192.168.0.0/24"),
-                    tunnel_source_interface="GigabitEthernet3",
-                    tunnel_route_via="GigabitEthernet3",
-                    tunnel_destination="dynamic",
-                    application="sig",
-                    tunnel_set="secure-internet-gateway-umbrella",
-                    tunnel_dc_preference="primary-dc",
-                    tcp_mss_adjust=1400,
-                    mtu=1400,
-                    dpd_interval=30,
-                    dpd_retries=3,
-                    ike_version=2,
-                    pre_shared_secret="MyPreSharedSecret",  # pragma: allowlist secret
-                    ike_rekey_interval=3600,
-                    ike_ciphersuite="aes256-cbc-sha1",
-                    ike_group="14",
-                    pre_shared_key_dynamic=False,
-                    ike_local_id="local-id",
-                    ike_remote_id="remote-id",
-                    ipsec_rekey_interval=3600,
-                    ipsec_replay_window=32,
-                    ipsec_ciphersuite="aes256-gcm",
-                    perfect_forward_secrecy="group-14",
-                    tracker=True,
-                    track_enable=True,
-                )
-            ],
-            service=[
-                Service(
-                    svc_type="sig",
-                    interface_pair=[
-                        InterfacePair(
-                            active_interface="ipsec255",
-                            active_interface_weight=10,
-                            backup_interface="None",
-                            backup_interface_weight=5,
-                        )
-                    ],
-                    auth_required=True,
-                    xff_forward_enabled=True,
-                    ofw_enabled=False,
-                    ips_control=True,
-                    caution_enabled=False,
-                    primary_data_center="Auto",
-                    secondary_data_center="Auto",
-                    ip=True,
-                    idle_time=30,
-                    display_time_unit="MINUTE",
-                    ip_enforced_for_known_browsers=True,
-                    refresh_time=5,
-                    refresh_time_unit="MINUTE",
-                    enabled=True,
-                    block_internet_until_accepted=False,
-                    force_ssl_inspection=True,
-                    timeout=60,
-                    data_center_primary="Auto",
-                    data_center_secondary="Auto",
-                )
-            ],
-            tracker_src_ip=IPv4Interface("192.168.0.0/32"),
-            tracker=[
-                Tracker(
-                    name="health-check-tracker",
-                    endpoint_api_url="http://api.example.com/health",
-                    threshold=100,
-                    interval=60,
-                    multiplier=2,
-                    tracker_type="SIG",
-                )
-            ],
-        )
-        self.sig_uuid = templates.create(cisco_sig)
-
-    def _create_security_policy(self) -> None:
-        api = self.session.api.policy
-        # --------------------------
-        # DNS Security Policy
-        # --------------------------
-        ldl = LocalDomainList(name=create_name_with_run_id("LocalDomainList"))
-        ldl.add_domain(".*.cisco.com")
-        ldl.add_domain("cisco.com")
-        self.pol_dict["LocalDomainList"] = api.lists.create(ldl)
-        # Must be defined in vManage manually
-        umbrella_data = api.lists.get(UmbrellaDataList).single_or_default()
-        definition = DnsSecurityDefinition.create_match_all_vpns_config(
-            umbrella_default=True,
-            umbrella_data=Reference(ref=umbrella_data.list_id),
-            dns_crypt=True,
-            dns_server_ip="10.0.2.1",
-            local_domain_bypass_list=Reference(ref=self.pol_dict["LocalDomainList"]),
-            child_org_id=54020,
-        )
-        dsp = DnsSecurityPolicy(name=self.dns_security_name, definition=definition)
-        self.pol_dict["DnsSecurityPolicy"] = api.definitions.create(dsp)
-        # --------------------------
-        # Zone Based Firewall Policy
-        # --------------------------
-        ipp = IntrusionPreventionPolicy(
-            name=create_name_with_run_id("IntrusionPreventionPolicy"),
-            mode="unified",
-            definition=IntrusionPreventionDefinition(signature_set="balanced", inspection_mode="detection"),
-        )
-        self.pol_dict["IntrusionPreventionPolicy"] = api.definitions.create(ipp)
-        aip = AdvancedInspectionProfilePolicy(
-            name=create_name_with_run_id("AIP"),
-            definition=AdvancedInspectionProfileDefinition(
-                tls_decryption_action="decrypt",
-                intrusion_prevention=Reference(ref=self.pol_dict["IntrusionPreventionPolicy"]),
-            ),
-        )
-        self.pol_dict["AdvancedInspectionProfilePolicy"] = api.definitions.create(aip)
-        zbfwp = ZoneBasedFWPolicy(name=create_name_with_run_id("ZoneBasedFWPolicy"))
-        zbfwp.mode = "unified"
-        zbfwp.add_zone_pair("self", "default")
-        zbfwp_seq = zbfwp.add_ipv4_rule(name=create_name_with_run_id("IPv4Rule"), base_action="inspect")
-        zbfwp_seq.set_advanced_inspection_profile_action(profile_id=self.pol_dict["AdvancedInspectionProfilePolicy"])
-        zbfwp_seq.match_source_port(ports=set([34000, 34568]))
-        zbfwp_seq.match_destination_ports(ports=set([34775, 37732]))
-        self.pol_dict["ZoneBasedFWPolicy"] = api.definitions.create(zbfwp)
-        # --------------------------
-        # Unified Security Policy
-        # --------------------------
-        usp = UnifiedSecurityPolicy(policy_name=self.security_policy_name)
-        usp.add_dns_security(self.pol_dict["DnsSecurityPolicy"])
-        usp.add_ng_firewall(self.pol_dict["ZoneBasedFWPolicy"])
-        self.pol_dict["UnifiedSecurityPolicy"] = api.security.create(usp)
-
-    def _create_localized_policy(self) -> None:
-        api = self.session.api.policy
-        for i, name in enumerate(self.queue_names):
-            class_map = ClassMapList(name=create_name_with_run_id(name))
-            class_map.assign_queue(i)
-            self.pol_dict[name] = api.lists.create(class_map)
-        qos_map = QoSMapPolicy(name=self.qos_map_name, description="QoS Map Policy")
-        qos_map.add_scheduler(queue=1, class_map_ref=self.pol_dict["CRITICAL_DATA"], bandwidth=30, buffer=30)
-        qos_map.add_scheduler(queue=2, class_map_ref=self.pol_dict["BULK"], bandwidth=10, buffer=10)
-        qos_map.add_scheduler(queue=3, class_map_ref=self.pol_dict["DEFAULT"], bandwidth=20, buffer=20)
-        qos_map.add_scheduler(queue=4, class_map_ref=self.pol_dict["INTERACTIVE_VIDEO"], bandwidth=20, buffer=20)
-        qos_map.add_scheduler(
-            queue=5, class_map_ref=self.pol_dict["CONTROL_SIGNALING"], bandwidth=10, buffer=10, drops="tail-drop"
-        )
-        self.pol_dict["QosMap-Policy"] = api.definitions.create(qos_map)
-        loc_pol = LocalizedPolicy(policy_name=self.localized_policy_name, policy_description="desc text")
-        loc_pol.set_definition(
-            [],
-            LocalizedPolicySettings(
-                cloud_qos=True,
-                cloud_qos_service_side=True,
-            ),
-        )
-        loc_pol.add_qos_map(self.pol_dict["QosMap-Policy"])
-        self.pol_dict["Localized-Policy"] = api.localized.create(loc_pol)
-
-    @classmethod
-    def tearDownClass(cls) -> None:
-        templates = cls.session.api.templates
-        templates.delete(DeviceTemplate, cls.device_template_name)
-        templates.delete(FeatureTemplate, cls.sig_name)  # type: ignore
-
-        policy = cls.session.api.policy
-        # ----------------------------
-        # Delete Localized Policy
-        # ----------------------------
-        policy.localized.delete(cls.pol_dict["Localized-Policy"])
-        policy.definitions.delete(QoSMapPolicy, cls.pol_dict["QosMap-Policy"])
-        policy.lists.delete(ClassMapList, cls.pol_dict["VOICE"])
-        policy.lists.delete(ClassMapList, cls.pol_dict["CRITICAL_DATA"])
-        policy.lists.delete(ClassMapList, cls.pol_dict["BULK"])
-        policy.lists.delete(ClassMapList, cls.pol_dict["DEFAULT"])
-        policy.lists.delete(ClassMapList, cls.pol_dict["INTERACTIVE_VIDEO"])
-        policy.lists.delete(ClassMapList, cls.pol_dict["CONTROL_SIGNALING"])
-        # ----------------------------
-        # Delete Security Policy
-        # ----------------------------
-        policy.security.delete(cls.pol_dict["UnifiedSecurityPolicy"])
-        policy.definitions.delete(ZoneBasedFWPolicy, cls.pol_dict["ZoneBasedFWPolicy"])
-        policy.definitions.delete(AdvancedInspectionProfilePolicy, cls.pol_dict["AdvancedInspectionProfilePolicy"])
-        policy.definitions.delete(IntrusionPreventionPolicy, cls.pol_dict["IntrusionPreventionPolicy"])
-        policy.definitions.delete(DnsSecurityPolicy, cls.pol_dict["DnsSecurityPolicy"])
-        policy.lists.delete(LocalDomainList, cls.pol_dict["LocalDomainList"])
-
-        cls.runner.clear_ux2()
-        return super().tearDownClass()

catalystwan-0.34.0.dev1/catalystwan/models/configuration/docs/README.md

@@ -1,3 +0,0 @@
-# UX2 Configuration Model - Entity relationship diagram (ERD)
-
-![alt text](./diagram.png)