No way to use target to send an op command to a firewall from Panorama using the supported Ansible modules?

[Eric_B]

I can do this by calling the API manually, but I can't seem to use the operation command module. 

curl --location --globoff 'https://<Panorama-IP>/api/?type=op&cmd=<show><system><info></info></system></show>&target=0123456789&key=<your-api-key>'

Skrting the issue in Ansible:

- name: Run an op command on a firewall from Panorama
  ansible.builtin.uri:
    url: "https://{{ ip_address }}/api/?type=op&target={{ active_fw_serial }}&cmd={{ policy_match_xml | urlencode }}&key={{ panorama_api_key }}"

Maybe I am missing something, but a quick look at the Python doesn't look like I can use the module for this. To have to manage another set of access, credentials, etc, to reach the firewalls directly for operational commands feels a bit off. 

[ozheng]

Hello @Eric_B 

First of all, as a disclaimer, I'm not an expert in ansible.

I just looked the doc of the Ansible available modules.

- panos_op
https://galaxy.ansible.com/ui/repo/published/paloaltonetworks/panos/content/module/panos_op/

- panos_type_cmd

https://galaxy.ansible.com/ui/repo/published/paloaltonetworks/panos/content/module/panos_type_cmd/

For both modules, I see there is the "serial_number" which can be used for the target.

Have you explored that?

Olivier