-
Notifications
You must be signed in to change notification settings - Fork 53
/
upgrade_ha_major.yml
50 lines (47 loc) · 1.71 KB
/
upgrade_ha_major.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
---
# upgrade_ha_major.yml - PAN-OS HA pair major version upgrade playbook.
#
# Description
# ===========
#
# Performs a major version upgrade (i.e. 8.1.12 -> 9.0.5) on a PAN-OS HA pair. This playbook simply imports the other
# playbooks in this repository making up the parts of this process (content upgrade, download base image, install
# target version).
#
# This playbook requires connection details for the two members of the HA pair to be specified in the variables
# 'primary_ip_address', 'secondary_ip_address', 'username', and 'password'. These may be defined as host variables
# (see `host_vars/ha_pair.yml` for an example) or extra vars.
#
# Usage
# =====
#
# Required variables:
#
# target: Target HA pair. See `host_vars/ha_pair.yml` for sample definition of host variables.
#
# base_version: Base version downloaded to both members of the HA pair. This version is not installed
# (for example, the 9.0.0 base image in the 8.1.12 -> 9.0.5 upgrade process).
#
# target_version: Version of PAN-OS to ultimately install on both members of the HA pair
# (for example, 9.0.5 in the 8.1.12 -> 9.0.5 upgrade process).
#
# See the VARS section of the playbook for additional customization options.
#
# Default run:
#
# $ ansible-playbook -i inventory upgrade_ha_major.yml --extra-vars "target=ha_pair base_version=9.0.0 target_version=9.0.5"
#
# Notes
# =====
#
# HA pairs with preemption enabled are not supported by these playbooks.
- import_playbook: upgrade_content.yml
vars:
sync_to_peer: true
- import_playbook: download_panos_version.yml
vars:
version: '{{ base_version }}'
sync_to_peer: true
- import_playbook: upgrade_ha.yml
vars:
version: '{{ target_version }}'