Forum Discussion

Altostratus

Aug 23, 2022

Create a IFile {system level} via API - Powershell

Hi All, Attempting the following: 1: Create iFile system level 2: Update existing iRule-> iFile referance the the file uploaded in step 1. Im getting stuck at step 1, any assistance creatly appre...

Aug 24, 2022

Found my fault... JRahm & Patrik_Jonsson this was after my long reply to your other post JRahm (and yes it works on a POST method)... I had the file name in the URL overload specified on the initial create request, it should not be in there...

so this..

$File_Name = 'MyFile'
$url       = "{0}{1}{2}" -f $big_ip, "/mgmt/tm/sys/file/ifile/",$File_Name

$headers = @{
    'Content-Type'    = 'application/json'
    'X-F5-Auth-Token' = $token
}

$body = @{
    'name'            = $File_Name
    'source-path'     = "file:/var/config/rest/downloads/$File_Name"
} | ConvertTo-Json -Compress

$result = Invoke-RestMethod -Method post -Uri $url -Headers $headers -Body $body

needs to be:

$File_Name = 'MyFile'
$url       = "{0}{1}" -f $big_ip, "/mgmt/tm/sys/file/ifile/"

$headers = @{
    'Content-Type'    = 'application/json'
    'X-F5-Auth-Token' = $token
}

$body = @{
    'name'            = $File_Name
    'source-path'     = "file:/var/config/rest/downloads/$File_Name"
} | ConvertTo-Json -Compress

$result = Invoke-RestMethod -Method post -Uri $url -Headers $headers -Body $body

without the file name in the initial overload.

Hope this helps some future person 🙂
Off to the next challange.

Bonus: Retyped to splat (overload definition) - because why not.

# Create a IFile {system level} 
$File_Name = 'MyFile'
$Uri       = "{0}{1}" -f $big_ip, "/mgmt/tm/sys/file/ifile/"

# Construct overload definition
$Param_InvokeRestMethod = @{
    headers = @{
        'Content-Type'    = 'application/json'
        'X-F5-Auth-Token' = $token
    }

    body = @{
        'name'            = $File_Name
        'source-path'     = "file:/var/config/rest/downloads/$File_Name"
    } | ConvertTo-Json -Compress

    Method = 'post'

    Uri = $Uri
}

# Post & capture result
$result = Invoke-RestMethod @Param_InvokeRestMethod

Patrik_Jonsson

MVP

Hi there!

Nice to see some Powershell users in the forum. 🙂 If you have validated that the file is actually there, try this to make sure that it's not SELinux that is tripping you up:

restorecon -RvF <file path>

Ps. Coming from Python2? Recommending string interpolation:

$url = "{0}{1}{2}" -f $big_ip, "/mgmt/tm/sys/file/ifile/", $File_Name
# Becomes
$url = "$big_ip/mgmt/tm/sys/file/ifile/$File_Name"
# A bit safer (less risk in terms of unintentionally referencing the wrong variable):
$url = "$($big_ip)/mgmt/tm/sys/file/ifile/$($File_Name)"

JRahm

Admin

Aug 24, 2022

create method should be a post as well, not a put. Maybe that's what you have, as I don't speak powershell very well. 🙂

For the python implementation of what you're trying to do, you can read the functional test of the python SDK here.

And might I add, proxicon, that that's a very well asked question! Great details. THANK YOU!

Patrik_Jonsson

MVP

Aug 24, 2022

Nice catch with the method! 🙂

proxicon

Altostratus

Aug 24, 2022

$File_Name = 'MyFile'
$url       = "{0}{1}{2}" -f $big_ip, "/mgmt/tm/sys/file/ifile/",$File_Name

$headers = @{
    'Content-Type'    = 'application/json'
    'X-F5-Auth-Token' = $token
}

$body = @{
    'name'            = $File_Name
    'source-path'     = "file:/var/config/rest/downloads/$File_Name"
} | ConvertTo-Json -Compress

$result = Invoke-RestMethod -Method post -Uri $url -Headers $headers -Body $body

needs to be:

$File_Name = 'MyFile'
$url       = "{0}{1}" -f $big_ip, "/mgmt/tm/sys/file/ifile/"

$headers = @{
    'Content-Type'    = 'application/json'
    'X-F5-Auth-Token' = $token
}

$body = @{
    'name'            = $File_Name
    'source-path'     = "file:/var/config/rest/downloads/$File_Name"
} | ConvertTo-Json -Compress

$result = Invoke-RestMethod -Method post -Uri $url -Headers $headers -Body $body

without the file name in the initial overload.

Hope this helps some future person 🙂
Off to the next challange.

Bonus: Retyped to splat (overload definition) - because why not.

# Create a IFile {system level} 
$File_Name = 'MyFile'
$Uri       = "{0}{1}" -f $big_ip, "/mgmt/tm/sys/file/ifile/"

# Construct overload definition
$Param_InvokeRestMethod = @{
    headers = @{
        'Content-Type'    = 'application/json'
        'X-F5-Auth-Token' = $token
    }

    body = @{
        'name'            = $File_Name
        'source-path'     = "file:/var/config/rest/downloads/$File_Name"
    } | ConvertTo-Json -Compress

    Method = 'post'

    Uri = $Uri
}

# Post & capture result
$result = Invoke-RestMethod @Param_InvokeRestMethod

Leslie_Hubertus
Ret. Employee
Aug 24, 2022
Thanks for sharing the solution for future users!

proxicon

Altostratus

Aug 24, 2022

Thanks for your reply JRahm ,

I have tried a Post as opposed to a Put method call & the API return message is different. Maybe a hint at what im doing wrong ?

With Put:

{"code":400,"message":"Failed! exit_code (37).\n","errorStack":[],"apiError":26214401}

With Post:

{"code":400,"message":"Found unexpected URI tmapi_mapper/sys/file/ifile/MyFile.","errorStack":[],"apiError":1}

I can add that my authenticated user I get the API token with is a radius authenticated user and not local. The only diff ive seen with thee Curl examples ive followed/mentioned here + the python wrapper mentionred (which I tried to re-type to powershell as well) are that they use a local user with the "Authentication: Basic user:pass" header as opposed to 'X-F5-Auth-Token' in the header which im using.

I can manually create a system level iFile manually in the UI with this radius user (this is what im trying to automate via the API) & use the iControl Reest API to upload new content into the iFile, this works for me using the X-F5-Auth-Token radius user. So the writing of new content to an existing iFile works for me but not the creation thereof not.

I have access to a few/newer F5-LTM, my network SME granted me access to a V15.1.5 F5-LTM to rule out a possible issue with the F5 12.1.5 im working with at the minute (K69621049) which was resolved in revision 12.1.5 I initially thought that this was my issue. Both revisions of F5 I can test against (15.1.5 & 12.1.5) Im observing the exact same return codes from the API as at the top of this post.

Taken the above into account, can this be an issue for me that the radius / remote user might have an issue on this method of the API & is it worth asking my network SME to try create a local account to rule this out?

Ive tried constructing the "Authentication: Basic user:pass" header with my radius user but get a 401 authentication failed. So I feel I needed to specify this in the initial post but it was omitted due to loads of typing 🙂

Invoke-RestMethod : {"code":401,"message":"Authorization failed: user=https://localhost/mgmt/shared/authz/users/MyUser resource=/mgmt/tm/sys/file/ifile/MyFile verb=POST uri:http://localhost:8100/mgmt/tm/sys/file/ifile/MyFile
[REDACTEDIP]referrer:[REDACTEDIP]sender:[REDACTEDIP]","referer":"[REDACTEDIP]","restOperationId":122408205,"errorStack":["java.lang.SecurityException: Authorization failed: user=https://localhost/mgmt/shared/authz/users/ccfortinetsrv
resource=/mgmt/tm/sys/file/ifile/MyFile verb=POST uri:http://localhost:8100/mgmt/tm/sys/file/ifile/MyFile referrer:[REDACTEDIP] sender:[REDACTEDIP]","at
com.f5.rest.workers.EvaluatePermissions.failPermissionValidation(EvaluatePermissions.java:236)","at com.f5.rest.workers.EvaluatePermissions.completeEvaluatePermission(EvaluatePermissions.java:198)","at
com.f5.rest.workers.EvaluatePermissions.evaluatePermission(EvaluatePermissions.java:78)","at com.f5.rest.workers.ForwarderPassThroughWorker.onForward(ForwarderPassThroughWorker.java:227)","at
com.f5.rest.workers.ForwarderPassThroughWorker.onPost(ForwarderPassThroughWorker.java:502)","at com.f5.rest.common.RestWorker.callDerivedRestMethod(RestWorker.java:1120)","at com.f5.rest.common.RestWorker.callRestMethodHandler(RestWorker.java:1034)","at
com.f5.rest.common.RestServer.processQueuedRequests(RestServer.java:1355)","at com.f5.rest.common.RestServer.access$000(RestServer.java:45)","at com.f5.rest.common.RestServer$1.run(RestServer.java:316)","at
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:473)","at java.util.concurrent.FutureTask.run(FutureTask.java:262)","at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:178)","at
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:292)","at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)","at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)","at java.lang.Thread.run(Thread.java:748)\n"],"kind":":resterrorresponse"}
At line:1 char:11

Recent Discussions

Under Attack? F5 Will Help You.
Contacting F5 Support?

DevCentral Quicklinks

* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com

Discover DevCentral Connects

* Podcasts
* Social Channels
* Video Streaming

Forum Discussion

Create a IFile {system level} via API - Powershell

Recent Discussions

APM with EntraID as idP / request signed

Should config via cli rather than gui?

Background Tasks

APM Modern Customization - modify Header in user-common.js and form in user-logon.js

Which process is consuming higher CPU

Related Content

Microsoft Powershell with iControl

iControlSnapIn (PowerShell) Create WideIP without AAAA record

Create a DevCentral account

PowerShell System Audit

F5 - System Administration

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS