topic Ansible role for PANOS upgrade in Automation/API Discussions

Ansible role for PANOS upgrade

DeepakVerma — Fri, 23 Dec 2022 11:35:02 GMT

Hi All ,

Do we have any role for PANOS upgrade in collection :

paloaltonetworks.panos

Thanks

Re: Ansible role for PANOS upgrade

JimmyHolland — Fri, 23 Dec 2022 12:32:48 GMT

Hi @DeepakVerma, there are no roles today.

Can you share what kind of roles would have benefit for you? Thank you 🙂

Re: Ansible role for PANOS upgrade

DeepakVerma — Fri, 23 Dec 2022 14:16:44 GMT

Hi @JimmyHolland
Thanks for the confirmation.
Basically we are planning to automate our daily operational works/upgrade etc , so was checking if we have any role already present which we can explorer and use if it fit to our requirements.
Just one more question , In Ansible is there way we can make sure to login to Active firewall ?
Like in python we can use fw.refresh_ha_active() which make sure to login to active firewall .
Any feedback/suggestions on this. ?

Re: Ansible role for PANOS upgrade

JimmyHolland — Fri, 23 Dec 2022 14:36:21 GMT

Hi @DeepakVerma, the collection includes over 100 modules so hopefully you are able to achieve you objectives with them. If you have suggestions for roles you would like to see, please let us know.

On the active firewall, you can use panos_facts to get the HA state of a device if you need to use this for some reason, here is a snippet showing how to get three different types of HA information, with example output:

tasks: - name: Gather facts for device paloaltonetworks.panos.panos_facts: provider: "{{ device }}" - name: Display HA information ansible.builtin.debug: msg: - "HA Enabled: {{ ansible_facts['net_ha_enabled'] }}" - "HA Type: {{ ansible_facts['net_ha_localmode'] }}" - "HA Status: {{ ansible_facts['net_ha_localstate'] }}"

ok: [lab] => { "msg": [ "HA Enabled: True", "HA Type: Active-Passive", "HA Status: active", ] }

Re: Ansible role for PANOS upgrade

DeepakVerma — Fri, 23 Dec 2022 15:53:26 GMT

Hi @JimmyHolland ,

Thanks for your help .

Sure , will check and reach out to you for any query related to role or any module.

Thanks ,

Deepak