Missing features

[tulip silo]

Hello everyone,

i miss the following functions in the Ansible modules.
After consulting with the API developers, there are RestAPI endpoints for these:

• It is not possible to activate SSL certificates created via Ansible. This must still be done on the CLI as follows:
  -> "security ssl modify -vserver <SVM> -serial <SERIALNUMBER> -ca <CA-NAME> -common-name <COMMON-NAME>"
  --> RestAPI equivalent "curl -ku admin:Netapp1! -X PATCH "https://cluster1.demo.netapp.com/api/svm/svms/276ca4b1-b008-11f0-b77d-005056ab4f0e " -d '{"certificate.uuid":"a1047016-1ddf-11ef-82f4-005056b06a43"}'"

• Setting the “-v3-hide-snapshot” option on an NFS server is currently not possible via Ansible either.
  -> "vserver nfs modify -vserver <SVM> -v3-hide-snapshot enabled"
  --> RestAPI equivalent field is "protocol.v3_features.hide_snapshot_enabled"

• Configure CIFS security options is not possible
  -> vserver cifs security modify -vserver <SVM> -session-security-for-ad-ldap sign
  -> vserver cifs security modify -vserver <SVM> -is-aes-encryption-enabled true
  --> RestAPI equivalent "curl -ku admin:Netapp1! -X PATCH "https://cluster1.demo.netapp.com/api/protocols/cifs/services/276ca4b1-b008-11f0-b77d-005056ab4f0e" -d '{"security.session_security":"sign"}'"
  --> RestAPI equivalent "curl -ku admin:Netapp1! -X PATCH "https://cluster1.demo.netapp.com/api/protocols/cifs/services/276ca4b1-b008-11f0-b77d-005056ab4f0e" -d '{"security.kdc_encryption":"true"}'"

Can you take a look at this and add it to the backlog so that these features will be available in a future version of Ansible?

Thank you and best regards

[wooden fractal]

Not sure if I am misinterpreting this but the CIFS security options are available with the following parameters I believe?
netapp.ontap.na_ontap_cifs_server module

kdc_encryption (boolean)
added in netapp.ontap 21.20.0
Specifies whether AES-128 and AES-256 encryption is enabled for all Kerberos-based communication with the Active Directory KDC.

session_security (string)
added in netapp.ontap 21.20.0
Specifies client session security for AD LDAP connections.

[tight palm]

hi @tulip silo
For the first use case, please refer to https://docs.ansible.com/projects/ansible/latest/collections/netapp/ontap/na_ontap_svm_module.html#parameter-web/certificate

For the second scenario, please refer to https://docs.ansible.com/projects/ansible/latest/collections/netapp/ontap/na_ontap_nfs_module.html#parameter-nfsv3_hide_snapdir

For the third scenario, please refer to kdc_encryption & kdc_encryption parameters in module na_ontap_cifs_server as @wooden fractal also pointed out.