cdot65 / pan-os-upgrade

An efficient tool to execute configuration backups, network state snapshots, system readiness checks, and operating system upgrades of Palo Alto Networks firewalls and Panorama appliances.
https://cdot65.github.io/pan-os-upgrade/
Apache License 2.0
39 stars 7 forks source link

49 enhance cli argument handling for distinct pan os device upgrade types #55

Closed cdot65 closed 7 months ago

cdot65 commented 7 months ago

Overview

This PR introduces significant enhancements to the pan-os-upgrade script, focusing on improving user experience, flexibility, and script management when performing upgrades across different PAN-OS device types. Recognizing the diverse operational needs within network environments, this update aims to streamline the upgrade process by providing clear and intuitive command-line options for targeting individual firewalls, Panorama-managed devices, and executing batch upgrades.

Key Enhancements:

Three Unique Workflows Supported:

firewall

Directly targets and initiates the upgrade process for an individual firewall, allowing for precise control when managing standalone devices.

panorama

Specifically targets and upgrades an individual Panorama appliance, catering to administrative needs for centralized management systems.

batch

Utilizes a Panorama appliance as a proxy to orchestrate batch upgrades of managed firewalls, significantly enhancing efficiency by supporting up to ten simultaneous upgrades. This feature is particularly beneficial for large-scale deployments, enabling administrators to streamline their upgrade processes.

Additional Adjustments

CLI Argument Differentiation: Introduced new CLI arguments to explicitly differentiate between target device types. This update ensures that users can easily specify their intended upgrade target, whether it be a standalone firewall, a Panorama-managed device, or a batch operation.

Enhanced Filter Support: For batch operations through Panorama, enhanced filtering capabilities allow users to precisely select the devices they intend to upgrade, providing greater control and flexibility in large and complex network environments.

Improved Usability and Flexibility: The updated script structure and CLI options are designed with user experience in mind, ensuring that the command-line interface is aligned with common operational scenarios and intuitive enough for both new and experienced users.

Streamlined Script Management: By accommodating different upgrade paths within the same script framework, this enhancement simplifies the management and execution of upgrades, reducing the potential for errors and increasing operational efficiency.

Request for Comments

We welcome feedback on these enhancements, including any concerns, alternative suggestions, or additional requirements. Our goal is to make the pan-os-upgrade script as useful and effective as possible for the community. Please share your thoughts and experiences to help us continue improving this tool.