topic updating a portion of the rule - ansible in Automation/API Discussions

updating a portion of the rule - ansible

Psabouri — Wed, 25 Mar 2020 20:09:19 GMT

Wondering if anyone has had any experience updating rules. I have approximately 700 or so rules that i need to add a security profile group to...

testing the following seems to basically overwrite anything not provided to 'any'

- name: update rules to FW
panos_security_rule:
ip_address: '{{ item.firewall }}'
username: '{{ username }}'
password: '{{ password }}'
rule_name: '{{ item.rule_name }}'
group_profile: '{{ item.profile_group_name }}'
commit: 'False'
with_items: "{{ firewall_rules }}"

Re: updating a portion of the rule - ansible

gfreeman — Wed, 25 Mar 2020 23:12:59 GMT

Yes! You can use facts and jinja2 templating functions to accomplish this. I've authored a blog post that explains everything step by step:

https://live.paloaltonetworks.com/t5/Automation-API-Blog/Ansible-Using-Facts-Modules-to-do-Updates/ba-p/275173

Re: updating a portion of the rule - ansible

Psabouri — Thu, 26 Mar 2020 03:27:57 GMT

giggidy .. thanks!