install_policy module (#61446)

lib/ansible/modules/network/checkpoint/cp_mgmt_install_policy.py

@@ -0,0 +1,126 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Ansible module to manage CheckPoint Firewall (c) 2019
+#
+# Ansible is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# Ansible is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with Ansible.  If not, see <http://www.gnu.org/licenses/>.
+#
+
+from __future__ import (absolute_import, division, print_function)
+
+__metaclass__ = type
+
+ANSIBLE_METADATA = {'metadata_version': '1.1',
+                    'status': ['preview'],
+                    'supported_by': 'community'}
+
+DOCUMENTATION = """
+---
+module: cp_mgmt_install_policy
+short_description: install policy on Checkpoint over Web Services API
+description:
+  - install policy on Checkpoint over Web Services API
+  - All operations are performed over Web Services API.
+version_added: "2.9"
+author: "Or Soffer (@chkp-orso)"
+options:
+  policy_package:
+    description:
+      - The name of the Policy Package to be installed.
+    type: str
+  targets:
+    description:
+      - On what targets to execute this command. Targets may be identified by their name, or object unique identifier.
+    type: list
+  access:
+    description:
+      - Set to be true in order to install the Access Control policy. By default, the value is true if Access Control policy is enabled on the input
+        policy package, otherwise false.
+    type: bool
+  desktop_security:
+    description:
+      - Set to be true in order to install the Desktop Security policy. By default, the value is true if desktop security policy is enabled on the
+        input policy package, otherwise false.
+    type: bool
+  qos:
+    description:
+      - Set to be true in order to install the QoS policy. By default, the value is true if Quality-of-Service policy is enabled on the input policy
+        package, otherwise false.
+    type: bool
+  threat_prevention:
+    description:
+      - Set to be true in order to install the Threat Prevention policy. By default, the value is true if Threat Prevention policy is enabled on the
+        input policy package, otherwise false.
+    type: bool
+  install_on_all_cluster_members_or_fail:
+    description:
+      - Relevant for the gateway clusters. If true, the policy is installed on all the cluster members. If the installation on a cluster member fails,
+        don't install on that cluster.
+    type: bool
+  prepare_only:
+    description:
+      - If true, prepares the policy for the installation, but doesn't install it on an installation target.
+    type: bool
+  revision:
+    description:
+      - The UID of the revision of the policy to install.
+    type: str
+extends_documentation_fragment: checkpoint_commands
+"""
+
+EXAMPLES = """
+- name: install-policy
+  cp_mgmt_install_policy:
+    access: true
+    policy_package: standard
+    targets:
+    - corporate-gateway
+    threat_prevention: true
+"""
+
+RETURN = """
+cp_mgmt_install_policy:
+  description: The checkpoint install-policy output.
+  returned: always.
+  type: dict
+"""
+
+from ansible.module_utils.basic import AnsibleModule
+from ansible.module_utils.network.checkpoint.checkpoint import checkpoint_argument_spec_for_commands, api_command
+
+
+def main():
+    argument_spec = dict(
+        policy_package=dict(type='str'),
+        targets=dict(type='list'),
+        access=dict(type='bool'),
+        desktop_security=dict(type='bool'),
+        qos=dict(type='bool'),
+        threat_prevention=dict(type='bool'),
+        install_on_all_cluster_members_or_fail=dict(type='bool'),
+        prepare_only=dict(type='bool'),
+        revision=dict(type='str')
+    )
+    argument_spec.update(checkpoint_argument_spec_for_commands)
+
+    module = AnsibleModule(argument_spec=argument_spec)
+
+    command = "install-policy"
+
+    result = api_command(module, command)
+    module.exit_json(**result)
+
+
+if __name__ == '__main__':
+    main()