- Remove default_value from
systemDefined
attribute inise_endpoint_identity_group
- Remove
default
fromise_device_admin_authorization_global_exception_rule
andise_network_access_authorization_global_exception_rule
- Remove default_value from
isReadOnly
andreadOnly
attributes inise_trustsec_security_group
andise_trustsec_security_group_acl
- Add
ise_sxp_domain_filter
resource and data source
- Fix managing
Default
network access and device administration resources
- Add
network_access_*_update_rank
anddevice_admin_*_update_rank
resources to update rank under network access and device admin policy sets to bypass API limitation which restricts rank assignments to a strictly incremental sequence. More detailed information is available here.
- Fix issue with
ise_repository
triggers in-place upgrade when no changes are made #59
- Make
groupId
attribute ofise_endpoint
resource optional
- Add
ise_endpoint
resource and data source - Add support for ISE version 3.3.0
- Use
set
type for list attributes with primitive values - Implement workaround for API issue when creating multiple network device groups at once
- Add
default
attribute toise_network_access_policy_set
resource - Add
default
attribute toise_device_admin_policy_set
resource - Allow updating default policy sets and rules
- Ignore error messages when attempting to delete default policy sets or rules
- Add
ise_active_directory_add_groups
resource - Add
ise_active_directory_join_domain_with_all_nodes
resource - Add
ise_active_directory_groups_by_domain
data source
- Fix import operation of nested resources (e.g.
ise_network_access_authentication_rule
) - Fix name-based queries for
device_admin
andnetwork_access
data sources - Add
ise_active_directory_join_point
resource and data source
- Retry on 400 and 500 HTTP errors when creating or updating objects
- Fix import operation of resources
- Fix issue with
ise_network_device_group
resource and ISE versions >= 3.2.0 Patch1. Due to a breaking change in the API, this resource is now only supported with ISE version >= 3.2.0 Patch1. - Add
ise_identity_source_sequence
resource and data source
- Fix default value of
ip_version
attribute ofise_trustsec_security_group_acl
resource - Fix idempotency issue with
ise_network_access_condition
andise_device_admin_condition
resources
- BREAKING CHANGE: Refactor
advanced_attributes
ofise_authorization_profile
resource and data source - Add
ise_allowed_protocols_tacacs
resource and data source
- Add
ise_downloadable_acl
resource and data source - Add
ise_tacacs_command_set
resource and data source - Add
ise_tacacs_profile
resource and data source - Add
ise_device_admin_condition
resource and data source - Add
ise_device_admin_policy_set
resource and data source - Add
ise_device_admin_time_and_date_condition
resource and data source - Add
ise_device_admin_authentication_rule
resource and data source - Add
ise_device_admin_authorization_rule
resource and data source - Add
ise_device_admin_authorization_exception_rule
resource and data source - Add
ise_device_admin_authorization_global_exception_rule
resource and data source - BREAKING CHANGE: Rename
profile
attribute toprofiles
ofise_network_access_authorization_rule
resource and data source - Add
ise_network_access_authorization_exception_rule
resource and data source - Add
ise_network_access_authorization_global_exception_rule
resource and data source
- Make
sgacls
attribute ofise_trustsec_egress_matrix_cell
resource optional
- Add
ise_trustsec_ip_to_sgt_mapping
resource and data source - Add
ise_trustsec_ip_to_sgt_mapping_group
resource and data source
- Add support for nested conditions to
ise_network_access_authentication_rule
resource and data source - Add support for nested conditions to
ise_network_access_authorization_rule
resource and data source - BREAKING CHANGE: Remove
condition_
prefix from nested attributes ofise_network_access_policy_set
resource and data source - Instead of specifying an
id
when querying an object using a data source,name
can also be used
- Fix issue with reading nested conditions using
ise_network_access_condition
resource - Add support for nested conditions to
ise_network_access_policy_set
resource and data source - Add
agentless_posture
attribute toise_authorization_profile
resource and data source - Add
identity_groups
andcustom_attributes
attributes toise_internal_user
resource and data source - Add support for nested conditions to
ise_network_access_authentication_rule
resource and data source - Add support for nested conditions to
ise_network_access_authorization_rule
resource and data source - Add
ise_trustsec_egress_matrix_cell
resource and data source - Add
ise_trustsec_security_group_acl
resource and data source
- Fix issue with nested conditions using
ise_network_access_condition
resource
- Initial Release