search

cdot65 / pan-os-upgrade

An efficient tool to execute configuration backups, network state snapshots, system readiness checks, and operating system upgrades of Palo Alto Networks firewalls and Panorama appliances.
https://cdot65.github.io/pan-os-upgrade/
Apache License 2.0
42 stars 9 forks source link

Suspend active Firewall after download to avoid time of downtime #140

Open Remi-SIB opened 4 months ago

Remi-SIB commented 4 months ago

First at all, thanks for your great work !

Is your feature request related to a problem? Please describe. when we have a HA pair of firewall, the active one is suspended just before downloading image, so it's in this state during all the download time. I think it could still be passive during the download in case something went wrong. It seems to occur when you donwload a base image and then download a second image.

Describe the solution you'd like Suspend the active one only after all image are downloaded

Describe alternatives you've considered Check the action of suspend active firewall and move it after all download action.

Additional context image

cdot65 commented 2 months ago

you're absolutely right, I changed the workflow for the web upgrade version but will revisit the CLI version too. thanks for bringing this up!