|
19 | 19 |
|
20 | 20 | The PANOS module configures Palo Alto firewalls running PANOS 7.1.0 or PANOS 8.1.0. |
21 | 21 |
|
22 | | -When committing changes to resources, include `panos_commit` in your manifest, or execute the `commit` task. You must do this before they can be made available to the running configuration. |
| 22 | +When committing changes to resources, include `panos_commit` in your manifest, or execute the `commit` task. You must do this before they can be made available to the running configuration. |
23 | 23 |
|
24 | 24 | The module provides a Puppet task to manually `commit`, `store_config` to a file, and `set_config` from a file. |
25 | 25 |
|
@@ -70,13 +70,27 @@ __Note:__ v0.1.0 requires `host` instead of `address` |
70 | 70 |
|
71 | 71 | __Note:__ v0.1.0 requires `user` instead of `username` |
72 | 72 |
|
73 | | -To obtain an API key for the device, it is possible to use the `panos::apikey` task. The required creditials file should be in the format of (a) above. After which you can discard it. Before running this task, install the module on your machine, along with [Puppet Bolt](https://puppet.com/docs/bolt/0.x/bolt_installing.html). When complete, execute the following command: |
| 73 | +To obtain an API key for the device, it is possible to use the `panos::apikey` task. Before running this task, install the module on your machine, along with [Puppet Bolt](https://puppet.com/docs/bolt/latest/bolt_installing.html). When complete, execute the following command: |
74 | 74 |
|
75 | 75 | ``` |
76 | | -bolt task run panos::apikey --nodes localhost --transport local --modulepath <module_installation_dir> --params @credentials.json |
| 76 | +bolt task run panos::apikey --nodes pan --modulepath <module_installation_dir> --inventoryfile <inventory_yaml_path> |
77 | 77 | ``` |
78 | 78 |
|
79 | | -The `--modulepath` param can be retrieved by typing `puppet config print modulepath`. The credentials file needs to be valid JSON containing host, username and password for the Palo Alto firewall. |
| 79 | +The following [inventory file](https://puppet.com/docs/bolt/latest/inventory_file.html) can be used to connect to your firewall. |
| 80 | +```yaml |
| 81 | +# inventory.yaml |
| 82 | +nodes: |
| 83 | + - name: firewall.example.com |
| 84 | + alias: pan |
| 85 | + config: |
| 86 | + transport: remote |
| 87 | + remote: |
| 88 | + remote-transport: panos |
| 89 | + user: admin |
| 90 | + password: admin |
| 91 | +``` |
| 92 | +
|
| 93 | +The `--modulepath` param can be retrieved by typing `puppet config print modulepath`. |
80 | 94 |
|
81 | 95 | Test your setup and get the certificate signed: |
82 | 96 |
|
|
0 commit comments