PaloAltoNetworks / xsoar-panos-upgrade-automation

XSOAR Content for managing the PAN-OS Upgrade process.
ISC License
2 stars 3 forks source link

Change Default Readiness Check from expired_licenses to active_support #21

Open GrantGabbert opened 4 months ago

GrantGabbert commented 4 months ago

Is your feature request related to a problem?

There are situations where an expired license would not prevent a firewall upgrade (such as a trial license or service that is no longer used). The default readiness check uses expired_licenses that will fail if any licenses are expired.

Describe the solution you'd like

I'd like to switch the expired_licenses check to the active_support.

Describe alternatives you've considered

I've considered deviating from the content pack, but then would need to manually merge for any future updates.

Additional context

When upgrading firewalls that have expired licenses but are still upgradable, we have to manually review and continue the upgrade. And since the expired licenses don't actually impact the upgrade, we don't think that the playbook should be interrupted.