cdot65 / pan-os-upgrade

An efficient tool to execute configuration backups, network state snapshots, system readiness checks, and operating system upgrades of Palo Alto Networks firewalls and Panorama appliances.
https://cdot65.github.io/pan-os-upgrade/
Apache License 2.0
39 stars 7 forks source link

Enhance Upgrade Script for Major/Minor Version Support in PAN-OS Firewalls #65

Closed cdot65 closed 7 months ago

cdot65 commented 7 months ago

Overview

This pull request introduces significant enhancements to the upgrade script, aiming to improve its handling of major and minor version upgrades for PAN-OS firewalls, especially in complex HA (High Availability) setups.

Key features and fixes

Close Match Version Handling

Introduced a find_close_matches function to suggest the closest available versions when the desired version is not found, enhancing user guidance in version selection.

Base Image Download Retry

Implemented retry functionality for base image downloads, ensuring robustness in network or server-side issues, reducing the chance of upgrade interruptions.

Graceful HA Upgrades

Refined the logic for handling upgrades in HA configurations, ensuring smoother step upgrades and minimizing potential synchronization issues between HA pairs.

Documentation Updates

Revised the documentation to reflect the new changes, providing clearer guidance for users and maintainers.


These improvements aim to streamline the upgrade process, reduce manual intervention, and enhance the overall reliability and user experience of upgrading PAN-OS firewalls, particularly in HA environments.