topic Re: [Ansible] Commit in Automation/API Discussions

[Ansible] Commit

atomasovic — Mon, 20 Apr 2020 06:47:44 GMT

Hello,

I've noticed that Ansible will commit changes by default, False option doesn't seem to influence it.

For example, if Ansible adds security rule for 10.10.10.1 - it will not be committed.

Next run, adding rule for 10.10.10.2, will commit the rule added for 10.10.10.1, and leave rules for 10.10.10.2.

Additionally, I have not been able to make panos_commit module work with "admins" key - all changes are always committed.

Did anyone perhaps have a similar experience?

Thank you.

Best regards.

Re: [Ansible] Commit

gfreeman — Fri, 01 May 2020 15:56:16 GMT

If I use "panos_security_rule" to add a rule and I set "commit" to False it does not commit. Also the "admins" param requires that your PAN-OS supports that feature (I think it went in around 8.0 timeframe), so you need to be running that or later for that to work.

I guess just make sure you're running a new enough version of PAN-OS and that you're using the Palo Alto Networks Ansible collection (or the role if you're not running Ansible 2.9 or later).