Prerequisites and Requirements¶
The following are prerequisites for using F5 Declarative Onboarding:
You must have an existing BIG-IP device with a management IP address.
- The BIG-IP must be running version 13.1.0 or later.
Due to changes in TMOS v18.104.22.168, the Declarative Onboarding (DO) Extension is not compatible with this specific TMOS version. Versions before and after 22.214.171.124 are compatible.
You must have an existing user account with the Administrator role. If you are using 13.1.x, the BIG-IP contains an admin user by default. If you are using 14.x, you must reset the admin password before installing Declarative Onboarding. See If using BIG-IP 14.0 or later for instructions.
While Declarative onboarding is supported on F5 vCMP systems, network stitching to vCMP Guests or Hosts is not supported.
If you are using an F5 BYOL license, you must have a valid F5 Networks License Registration Key to include in your declaration. If you do not have one, contact your F5 sales representative. If you do not use a valid F5 license key, your declaration will fail. This is not a requirement if you are using a BIG-IP with pay-as-you-go licensing.
If you are using a single NIC BIG-IP system, you must include port 8443 after the IP address of the BIG-IP in your POST and GET requests, such as
You should be familiar with the F5 BIG-IP and F5 terminology. The settings and features Declarative Onboarding uses are well-documented in the product documentation. For general information and documentation on the BIG-IP system, see the F5 Knowledge Center.
Notes and tips¶
- With the release of Declarative Onboarding 1.2.0, the GitHub repository includes a Declarative Onboarding Postman collection with all of the example declarations. For information on importing this collection and using Postman collections, see the Postman documentation.
- The first time you POST a Declarative Onboarding declaration, the system records the configuration that exists prior to processing the declaration. Declarative Onboarding is meant to initially configure a BIG-IP device. However, if you POST subsequent declarations to the same BIG-IP system, and leave out some of the properties you initially used, the system restores the original properties for those items. Important: No matter what you send in a subsequent declaration, Declarative Onboarding will never unlicense a BIG-IP device, it will never delete a user, and it never break the device trust once it has been established.
- You can use GET to retrieve a sample declaration. Use GET to
- When you POST a declaration, while the system is processing the declaration, the HTTP connection can be broken, especially when provisioning modules. You can use the property “async”: “true”, in your declaration, and then use GET to poll for status.
- If you POST a declaration that modifies the password for the admin account, even if the declaration returns an error, the password can be changed. Therefore you may need to update the admin password in the client you are using to send the declaration.
- After using Declarative Onboarding, if you want to use a declarative model to configure applications and services on a BIG-IP device, see the Application Services 3 (AS3) documentation.