topic Re: GCP VM-100 deployment issue in VM-Series in the Public Cloud

GCP VM-100 deployment issue

greg.donohoe — Fri, 02 Jul 2021 11:16:43 GMT

I am trying to programmatically create a compute instance running the VM series Next-Gen bundle 2 PAYG image.

Can anyone tell me how this can be done? I understand that I need to load the image into cloud Storage which I use in my code so that the compute vm knows where to get the PAN-OS image. However, Iit is not clear to me how I can get the PAYG image in the first place. Do I need to buy it from PaloAlto and then upload it? Or can I get it from GCP MarketPlace?

Any help would be greatly appreciated.

Thanks Greg.

Re: GCP VM-100 deployment issue

glynn — Fri, 02 Jul 2021 11:28:38 GMT

There is no longer a need to load the image into cloud storage as the images for the PAYGO bundles as well as BYOL are available directly from GCP. To see a list of available images/versions, you can use a CLI command from a cloud shell:

gcloud compute images list --project paloaltonetworksgcp-public --no-standard-images

If you need the entire URI:

gcloud compute images list --project paloaltonetworksgcp-public --no-standard-images --uri

Once you have the target image, it should be a matter of configuring your automation to reference it.

Regards,

Patrick

Re: GCP VM-100 deployment issue

greg.donohoe — Fri, 02 Jul 2021 11:51:40 GMT

This is exactly what I am looking for. Thank you very much Patrick.

Out of interest is there a link somewhere which outlines these steps or did you learn this the "hard way"?

Re: GCP VM-100 deployment issue

glynn — Fri, 02 Jul 2021 13:48:15 GMT

Greg:

I was involved early on and did it "the hard way". It has subsequently been documented:

https://docs.paloaltonetworks.com/vm-series/10-0/vm-series-deployment/set-up-the-vm-series-firewall-on-google-cloud-platform/deploy-vm-series-on-gcp/use-custom-templates-or-the-gcloud-cli-to-deploy-the-vm-series-firewall.html