Ansible role for PANOS upgrade

[DeepakVerma]

Hi All ,

Do we have any role for PANOS upgrade in collection : 

paloaltonetworks.panos

Thanks 

[JimmyHolland]

Hi @DeepakVerma, there are no roles today.

Can you share what kind of roles would have benefit for you? Thank you 🙂

[DeepakVerma]

Hi @JimmyHolland 
Thanks for the confirmation. 
Basically we are planning to automate our daily operational works/upgrade etc , so was checking if we have any role already present which we can explorer and use if it fit to our requirements. 
Just one more question , In Ansible is there way we can make sure to login to Active firewall  ?
Like in python we can use fw.refresh_ha_active() which make sure to login to active firewall . 
Any feedback/suggestions on this. ?

[JimmyHolland · Accepted solution]

Hi @DeepakVerma, the collection includes over 100 modules so hopefully you are able to achieve you objectives with them. If you have suggestions for roles you would like to see, please let us know.

On the active firewall, you can use panos_facts to get the HA state of a device if you need to use this for some reason, here is a snippet showing how to get three different types of HA information, with example output:

  tasks:
    - name: Gather facts for device
      paloaltonetworks.panos.panos_facts:
        provider: "{{ device }}"

    - name: Display HA information
      ansible.builtin.debug:
        msg:
          - "HA Enabled: {{ ansible_facts['net_ha_enabled'] }}"
          - "HA Type: {{ ansible_facts['net_ha_localmode'] }}"
          - "HA Status: {{ ansible_facts['net_ha_localstate'] }}"

ok: [lab] => {
    "msg": [
        "HA Enabled: True",
        "HA Type: Active-Passive",
        "HA Status: active",
    ]
}

[DeepakVerma · Accepted solution]

Hi @JimmyHolland ,

Thanks for your help .

Sure , will check and reach out to you for any query related to role or any module.

Thanks ,

Deepak