Skip to content

Changelog#

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog 1.1.0, and this project adheres to Semantic Versioning 2.0.0.

Unreleased#

0.5.0 – 2026-09-03#

Compatibility: NetBox v4.7

Added#

  • Add ACI Leaf Switch Profiles with Leaf Selectors and Leaf Node Blocks, modeling the switch side of the fabric access policy chain.
  • Add ACI Leaf Interface Profiles with Leaf Interface Selectors and Leaf Port Blocks, modeling the interface side of the same chain.
  • Add ACI Leaf Switch Profile Interface Bindings, associating a Leaf Switch Profile with the Leaf Interface Profiles it applies.
  • Add ACI Leaf Interface Policy Groups, including their Attachable Access Entity Profile association. Deleting an AAEP referenced by a policy group is refused rather than silently detaching it.
  • Add ACI Node Interfaces, optionally linked to a NetBox interface, and ACI Leaf Interface Overrides for per-port access policy-group overrides.
  • Add ACI VPC Protection Groups, pairing two Leaf Nodes in the same ACI Pod into an explicit virtual port channel domain with a logical pair ID.
  • Resolve the ACI Nodes covered by a Leaf Switch Profile across its selectors and node blocks, surface them on the detail view, and add a filter for Leaf Switch Profiles covering a given ACI Node.
  • Add REST filters for nine ACI L3Out policy-name fields and a GraphQL filter for the ACI Bridge Domain unicast-routing flag, closing API filter parity gaps.
  • Show and filter ACI Endpoint Group AAEP Bindings by primary VLAN; add filters for ACI Contract Relations by every supported ACI object type and for ACI External Subnets by BGP and OSPF route-summarization policy name.
  • Render human-readable TCP rule labels on ACI Contract Filter Entry detail views.
  • Extend NetBox's GraphQL Interface and Tenant types with aci_node_interface and aci_tenants, respectively.
  • Convert all ACI choice values to NetBox Choice objects, add descriptions where labels alone are insufficient, and render them as subtitles in form dropdowns.
  • Add a demo data seeder at scripts/seed_demo_data.py and a make seed target for populating a development instance.

Changed#

  • BREAKING: Require NetBox v4.7. NetBox v4.5 and v4.6 are no longer supported, and the plugin now targets Django 6.1.
  • BREAKING: Remove the export_route_control_enforcement_enabled filter from ACIL3OutFilter in the GraphQL schema. The underlying attribute is constant, so the filter could never narrow a result set.
  • Port ACI detail pages to NetBox v4.7's declarative UI layout and panel API, replacing most model-specific detail templates.
  • Make the QoS class column optional on the ACI Endpoint Group and ACI uSeg Endpoint Group import forms. A CSV that previously failed without the column now succeeds and takes the model default.
  • Split the Fabric navigation menu into Fabric Inventory, Fabric Policies, and Fabric Access Policies groups.
  • Shorten table column headers by dropping the redundant ACI prefix, except on Tenant and VRF where the prefix separates them from the NetBox core columns.
  • Render paired range fields, such as VLAN ID from and to, inline with a single shared help text.
  • Reduce REST API list endpoint query counts by expanding select_related() across serializer-rendered foreign-key chains.

Fixed#

  • Security: Restrict child-object tables on ACI detail views to rows the requesting user may view. Six detail views previously queried child rows without applying object permissions, so a user with a constrained permission could see entries they could not open.
  • Return field errors instead of a server error when an ACI Node is saved with an empty Node ID, or with a Node object or TEP address but no ACI Pod.
  • Declare the ACI Bridge Domain, ACI Endpoint Group and ACI uSeg Endpoint Group filter-form fields named by their field sets. Seven Bridge Domain filters and one filter on each Endpoint Group form were listed but never rendered, making them unreachable from the UI; the REST API was unaffected.
  • Expose the ACI uSeg Endpoint Group match operator in the UI. The attribute shipped in v0.1.0 but was reachable only through the REST and GraphQL APIs.
  • Reject moving an ACI Attachable Access Entity Profile to another ACI Fabric while AAEP Domain Bindings or ACI Endpoint Group AAEP Bindings from the original Fabric remain attached.
  • Reject moving an ACI VLAN Pool to another ACI Fabric while ACI Physical or ACI Routed Domains from the original Fabric still reference it.
  • Reject moving an ACI Pod, an ACI Node or an ACI Node Interface to another ACI Fabric while the move would strand an ACI Leaf Interface Override.
  • Reject changing an ACI Node's role away from Leaf, and clearing or repointing its Node object, while ACI Node Interfaces still reference it. The role change is reachable from bulk edit, so a single action could strand many rows.
  • Persist the ACI Node object relation and its cached attributes in the same database write.
  • Report ACI Endpoint Group subnet validation errors on the fields they belong to instead of as non-field errors.
  • Index the ACI Node Interface description and comments for global search. The index carried the foreign-key-only shape used by relation models, so a description matched in the filter q box but never in global search.
  • Scope each dynamic generic-object form refresh to its own container, so editing one field no longer re-renders the whole form section.

0.4.0 – 2026-07-22#

Compatibility: NetBox v4.5, NetBox v4.6

Added#

  • Add ACI VLAN Pools and VLAN Pool Ranges with allocation modes, range roles, and optional NetBox VLAN Group integration.
  • Add ACI Physical Domains and their ACI VLAN Pool associations.
  • Add ACI Attachable Access Entity Profiles (AAEPs), including infrastructure VLAN support, and AAEP Domain Bindings.
  • Add ACI Endpoint Group Domain Bindings with deployment and resolution immediacy.
  • Add ACI Endpoint Group AAEP Bindings with VLAN encapsulation, optional primary encapsulation, port mode, and deployment immediacy, validated against the ACI VLAN Pool of a Physical Domain shared by the Endpoint Group and AAEP.
  • Enforce unique encapsulation VLAN IDs across an AAEP's bindings; require untagged bindings to be exclusive and allow at most one native binding per AAEP.
  • Add NetBox tenant-group filters (nb_tenant_group and nb_tenant_group_id) to the Contract Filter Entry list, matching the other tenant-scoped filters.

Changed#

  • BREAKING: Move the External Subnet UI to the top-level external-subnets/ path so the navigation highlights its own entry. Existing bookmarks to v0.3.x URLs must be updated.
  • BREAKING: Pluralize the ESG selector REST API paths to esg-endpoint-group-selectors/ and esg-endpoint-selectors/. The former singular paths no longer resolve; update any API integrations.
  • Show the parent ACI L3Out instead of the ACI Tenant and VRF in ACI External Endpoint Group search results, aligning the L3Out-family search indexes.
  • Rename table name-column headers to the short model name without the ACI prefix (for example Fabric, VLAN Pool); only ACI Tenant and ACI VRF keep the prefix. The L3Out, External EPG, and External Subnet tables get proper headers instead of a generic "Name".
  • Optimize ACI Fabric list and detail querysets with select_related() for infra_vlan and gipo_pool to avoid redundant related-object queries.

Fixed#

  • Run model validation on ACI External Subnet REST API writes.
  • Scope the ACI Fabric infrastructure VLAN CSV import by VLAN group so duplicate VLAN IDs in different groups resolve correctly.
  • Reject blank choice values on ACI edit forms instead of storing them as empty strings.
  • Prevent deleting a Region or Site Group ancestor from cascading to scoped ACI Fabric or ACI Pod objects.
  • Return a validation error instead of an HTTP 500 response when a required parent field is left unset on ACI Bridge Domain, ACI ESG Endpoint Group Selector, and ACI Contract Relation submissions.
  • Correct the ACI Fabric filter on the Contract Subject Filter list; it previously queried the tenant table and never matched.
  • Make the NetBox tenant filter on the Contract Filter Entry list match the entry's own tenant rather than its parent Contract Filter's tenant.
  • Include Contracts and Contract Filters from the common ACI Tenant in tenant-scoped edit and bulk-edit form lookups.
  • Include ACI VRFs from the common ACI Tenant in the ACI Bridge Domain VRF form lookup.
  • Remove the invalid nb_vrf_id field from the ACI Bridge Domain Subnet filter form.
  • Repair mislabeled and orphaned form fields on ACI Bridge Domain, Contract Subject, Contract Subject Filter, Contract Filter Entry, and ESG forms so custom labels, widgets, and cascading lookups apply again.
  • Disable ordering by ACI Tenant in the Endpoint Group table to prevent database query errors.
  • Correct the aci_fabric field label on ACI Tenants from "ACI Tenant" to "ACI Fabric".
  • Check the Contract Subject Filter add permission for the "Assign a Filter" button instead of the Contract Subject add permission.
  • Prefill the ACI Fabric when adding a Domain Binding from an AAEP detail view.
  • Correct the ESG Endpoint Selector card header by removing the stray "Group".
  • Stabilize detail-view child-tab ordering for uSeg Endpoint Groups and ESG Endpoint Selectors.

0.3.1 – 2026-06-21#

Compatibility: NetBox v4.5, NetBox v4.6

Added#

  • Allow multi-select choice filters across Endpoint Group, VRF, Bridge Domain, Contract Filter Entry, Contract Relation, L3Out, and External Endpoint Group views, including QoS, protocol, port, role, policy-control, and Bridge Domain forwarding-mode fields.
  • Filter ACI uSeg Network Attributes and ESG endpoint selectors by IP address, prefix, and MAC address.
  • Enable pagination for GraphQL list queries.
  • Document filtering GraphQL list queries by object ID lists, as provided by NetBox core.
  • Include the ACI Tenant and VRF in External Endpoint Group search results.
  • Add BGP-enabled and OSPF-enabled columns to the ACI L3Out table.
  • Add a Tenant External navigation group for L3Out objects.
  • Validate VRF consistency when an Endpoint Group's Bridge Domain is changed.

Changed#

  • Compare foreign keys by ID in model validation to avoid extra database queries.
  • Rename the L3Out Bridge Domain bindings tab URL from bridge-domain-bindings to bridge-domains.
  • Clarify the multipod_enabled help text to state that it is a NetBox-side marker and is not pushed to APIC.
  • Split Tenant documentation into feature-specific pages and add a GraphQL API filtering guide.
  • Expand tests to maintain full coverage.

Fixed#

  • Correct the search field on the ACI Bridge Domain Subnet filter.
  • Disable ordering on foreign-key columns in object tables.
  • Raise object-type validation errors at the form level for ACI Contract Relations, ESG selectors, and uSeg Network Attributes.
  • Stop copying target object IDs when cloning ACI Contract Relations and uSeg Network Attributes.
  • Require an attribute object on ACI uSeg Network Attributes unless the EPG subnet is used.

0.3.0 – 2026-05-31#

Compatibility: NetBox v4.5, NetBox v4.6

Added#

  • Model ACI L3Outs, External Endpoint Groups, and External Subnets with full UI, REST API, GraphQL, and search support.
  • Model ACI Routed Domains (external routed L3 domains).
  • Add ACI Bridge Domain to L3Out bindings.
  • Allow ACI External Endpoint Groups as Contract Relation targets.

Changed#

  • Migrate the documentation toolchain to Zensical.

Fixed#

  • Correct the AF12 and AF13 QoS DSCP value labels.
  • Index comments on the remaining ACI search indexes.
  • Group description with the identity fields in the filter forms.
  • Remove the unused PIM IPv6 source and destination filter fields from the ACI Bridge Domain GraphQL filter.
  • Apply interpolation after translation in validator error messages so the strings stay extractable.

0.2.2 – 2026-05-05#

Compatibility: NetBox v4.5, NetBox v4.6

Added#

  • Add support for NetBox v4.6.

0.2.1 – 2026-03-22#

Compatibility: NetBox v4.5

Added#

  • Allow Contract Relations to use Contracts from the common ACI Tenant.

Changed#

  • Clarify Contract Relation documentation, including ESG and uSeg EPG support and the same-fabric / tenant-or-common requirements.
  • Remove the uniqueness constraint on ACI Fabric IDs to support multi-fabric deployments.
  • Add validation to ensure Contract Filters belong to the same ACI Tenant as the Contract Subject, or to the common Tenant in the same fabric.
  • Refactor Contract Relation form initialization so Tenant and Fabric values are derived from the selected ACI object.
  • Update GraphQL filter compatibility for newer strawberry-graphql-django APIs.
  • Replace deprecated GraphQL filter decorators with the current API.
  • Refactor tenant-or-common filtering into reusable FilterSet mixins.
  • Update project linting, formatting, and dependency configuration.

Fixed#

  • Remove a redundant validation check in Contract Filter protocol validation.
  • Simplify Node uniqueness validation by moving logic into model clean methods.
  • Initialize ESG and uSeg EPG cache attributes in Contract Relations.

0.2.0 – 2026-01-25#

Compatibility: NetBox v4.5

Added#

  • Support multiple ACI Fabrics.
  • Support ACI Pods.
  • Support ACI Nodes.
  • Record child-object changes (Bridge Domain Subnets, Contract Relations, Contract Filter Entries, and Contract Subjects) on the parent object.
  • Add ACITenantFilterSetMixin and NBTenantFilterSetMixin to deduplicate filter logic.
  • Add ACIBaseTestCase for consistent model test fixtures.
  • Add ownership support.

Changed#

  • BREAKING: Require NetBox 4.5+ (was 4.4).
  • BREAKING: ACI Tenants now require a foreign key to an ACI Fabric.
  • Use string-based ForeignKey references for plugin models.
  • Use select_related for ForeignKey fields to reduce query count.
  • Rely on max_length (and the database) for length enforcement by removing explicit MaxLengthValidators and regex length quantifiers.
  • Centralize max-length constants.
  • Add in_list lookups for GraphQL enum fields.

Removed#

  • Drop support for NetBox 4.3–4.4.

Fixed#

  • Make ACITenant.parent_object a property.
  • Localize the Attributes and NetBox Tenant form fieldset labels with gettext.
  • Fix navigation permissions for uSeg Endpoint Groups.
  • Rename the GraphQL NetBox Tenant filter field from tenant to nb_tenant.

0.1.0 – 2025-09-03#

Compatibility: NetBox v4.3, NetBox v4.4

Added#

  • First PyPI release of the NetBox ACI plugin.
  • Models/UI for Tenants, Application Profiles, EPGs, uSeg EPGs, ESGs, Bridge Domains, VRFs, Contracts, Contract Subjects, and Contract Filters.