Leveraging PAN-defined objects within Terrafom

franklinwong — Tue, 22 May 2018 22:40:11 GMT

A brand new PAN device has pre-defined objects. What is the best method to consume these existing objects? Should I be dumping the PAN objects from the API, and creating Terraform data objects to statically consume? Should I import them into panorama_address/service_objects to manage them within my TF state file?

Is Palo Alto planning on scripting this for our consumption. Then when an object gets updated or added, we could consume the new list. It could be kept here: https://github.com/terraform-providers/terraform-provider-panos.

Re: Leveraging PAN-defined objects within Terrafom

gfreeman — Tue, 22 May 2018 22:59:38 GMT

Hi, yeah, that github repo has code that is maintained by Palo Alto Networks employees.

Providing access to the predefined address objects / service objects as a data source seems to be the most appropriate thing to do, as predefined objects are read only. Can you open up an issue against the provider so we can track this feature request?

In the mean time, you may not be able to refer to the predefined objects using Terraform resource (or data source) attribute variables, but you can still use the absolute names of these things in your Terraform plan files, and PAN-OS will know if it's supposed to be a predefined object or a user defined object.

topic Leveraging PAN-defined objects within Terrafom in Automation/API Discussions

Leveraging PAN-defined objects within Terrafom

Re: Leveraging PAN-defined objects within Terrafom