Service Mapping F5 Big IP Load Balancers Rest API oAuth 2.0
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11 hours ago
We're having issues with Service Mapping our load balancers in all of our services.
We are using the Rest API oAuth 2.0 Serverless Discovery method. Discovery is working great
Our F5 is using BIGIP version 17.1xx and our account role is set to Auditor, no changes (if that's even possible)
In service Mapping we are getting this error "Missing pattern-based outgoing connections from load balancer. Please check the correctness of the incoming connection."
And the error is specific to the call in F5 BIGIP LTM section, Step 44.2 get irule for VIP and the call is GET uri:http://"get_attr{managementIP}"/mgmt/tm/ltm/virtual/~Common~"get_attri{vip_name}"?$select=rules
The result is Response has error. Status code is 401 . error code: 3 . error message: Method faild with code: 401 - Invalid username/password combo. However the username and password is indeed correct.
We were able to go into our test environment LBs and our team increased the role to Administrator. Technimagically, it resolved and the load balancer mapped fine.
Putting the Admin role on our production LBs is however, not an option. I haven't found any documentation that specifies 1) why this call caused an error with the Auditor role, as the Auditor role has the permissions out lined in https://www.servicenow.com/docs/r/it-operations-management/itom-visibility/c_LoadBalancerF5BIGIP.htm... for this call https://" get_attr {"managementIP"}"/mgmt/tm/ltm/virtual/Common"get_attr {"vip_name"}
2) if there is a specific role that does work and is more of secure role or if creating a custom role is required.
We can't be the only ones service mapping F5 load balancers for this to not have more specific documentation on either side (ServiceNow or F5) or someone already doing it more successfully than we are at the moment. Does anyone have a working resolution for this? And a reason it happens?