Skip to content

Commit

Permalink
Merge pull request #775 from swaschkut/main
Browse files Browse the repository at this point in the history
publish v2.1.16
  • Loading branch information
swaschkut authored Sep 8, 2023
2 parents 11b0ac5 + 4bd325f commit b07de57
Show file tree
Hide file tree
Showing 38 changed files with 689 additions and 213 deletions.
28 changes: 27 additions & 1 deletion CHANGELOG.txt
Original file line number Diff line number Diff line change
@@ -1,6 +1,32 @@
CHANGELOG

2.1.15
2.1.16
UTIL:
* type=address | new 'filter=(name same.as.region.predefined)'
* class UTIL | extend if API mode - with App-id/AV/WF/Threat version info
* type=address | introduce 'filter=(tag is.set)'
* type=xml-issue | extend with rule tag object validation for twice set the same tag object
* introduce GroupTagRuleContainer to all Rule classes

BUGFIX:
* class Sub | bugfix for default-securiy-rules | if partial config is already available
* type=address-merger | bugfix to not delete TAG object from upperlevel if TAG object with same name exist at childDG
* type=address/service actions=move | bugfix if group with same name already exist - correctly skip movement
* class PANConf | fix for PHP 8.2
* type=address/service actions=move:shared location=any - bugfix for Firewall config
* type=rule-merger | bugfix to not add description twice, which exceeds description length to >1024
* type=tag actions=delete 'filter=(object is.unused) | bugfix for group-tag used in Rules, reference missing
* introduce GroupTagRulecontainer - to fix type=tag-merger issue if group-tag is used
* class PANConf - bugfix for type=stats on FW config for tmp/ghost object count on 'shared'
* type=XYZ outputformatset=setcommand.txt | bugfix to always have correct xPath availalble for set commands
* bugfix - related to TAG objects where name include character '(' and/or ')' - final fix for tag-merger including method createTag()
* bugfix for argument outputformatset - no multi-vsys device - remove vsys1 to fit set commands

GENERAL:
* develop pan-os-php-api | per default enable shadow-json checkbox - with shadow-nojson, output has a bug and filter are not working correctly - fixing later


2.1.15 (20230830)
UTIL:

BUGFIX:
Expand Down
92 changes: 46 additions & 46 deletions READMEdocker.md
Original file line number Diff line number Diff line change
Expand Up @@ -71,50 +71,34 @@ cd [/rootFolder/parentFolder/childFolder]

#Additional Information

Docker build
============

There are Dockerfiles available with OS: Ubuntu20/22 and CentOS 7

For a quick start please use [WIKI docker](https://github.com/PaloAltoNetworks/pan-os-php/wiki/docker)


* **MacOS** : [run on MacOS terminal]
```bash
cd [pan-os-php Root folder]
docker build -t pan-os-php -f docker/Dockerfile .
cd [go to the Folder you like to share with the Container]
docker run --name panosphp --rm -v ${PWD}:/share -it pan-os-php
```

* **WINDOWS** : [run on Windows terminal]
```bash
cd [pan-os-php Root folder]
docker build -t pan-os-php -f docker/Dockerfile .
cd [go to the Folder you like to share with the Container]
docker run --name panosphp --rm -v "%CD%":/share -it pan-os-php
```




Docker PAN-OS-PHP API and UI
============
final production Container:
```bash
cd [pan-os-php Root folder]
docker build -t pan-os-php-api:latest -f docker/Dockerfile-API .
docker run -d -p 8082:80 pan-os-php-api:latest
docker run -d -p 8082:80 swaschkut/pan-os-php-api:latest
```
local Development Container:
PAN-OS-PHP UI is available at: (which triggers next PAN-OS-PHP API)
```bash
docker run -d -p 8082:80 --mount type=bind,source="[absolute_ROOTFOLDER]/pan-os-php",target=/var/www/html -v [absolute_ROOTFOLDER]/pan-os-php/var/docker/uploads.ini:/usr/local/etc/php/conf.d/uploads.ini php:apache
http://localhost:8082/utils/develop/ui
```

PAN-OS-PHP UI is available at: (which triggers next PAN-OS-PHP API)
PAN-OS-PHP API is also working with PAN-OS XML API, therefor you need to prepare you Docker installation:
```bash
API: http://localhost:8082/utils/api/v1/tool.php/key-manager?&add=MGMTIP&user=USERNAME&pw=PASSWORD
```


Examples to run PAN-OS-PHP against PAN-OS FW and Panorama offline configuration files, and manipulate in the same way as on PAN-OS-PHP ClI:
```bash
http://localhost:8082/utils/develop/ui
ClI: pan-os-php type=address help
API: http://localhost:8082/utils/api/v1/tool.php/address?help
```
```bash
CLI: pan-os-php type=address listactions
API: http://localhost:8082/utils/api/v1/tool.php/address?listactions
```


To get it working on your own PAN-OS Firewall / Panorama config files,
please upload your config files via PAN-OS-PHP UI (URL above)

Expand Down Expand Up @@ -171,18 +155,34 @@ The following "RESTAPI" routes are available:
- /xml-op-json
- /bpa-generator

PAN-OS-PHP API is also working with PAN-OS XML API, therefor you need to prepare you Docker installation:
```bash
API: http://localhost:8082/utils/api/v1/tool.php/key-manager?&add=MGMTIP&user=USERNAME&pw=PASSWORD
```


Examples to run PAN-OS-PHP against PAN-OS FW and Panorama offline configuration files, and manipulate in the same way as on PAN-OS-PHP ClI:
```bash
ClI: pan-os-php type=address help
API: http://localhost:8082/utils/api/v1/tool.php/address?help
```
Docker build
============

There are Dockerfiles available with OS: Ubuntu20/22 and CentOS 7

For a quick start please use [WIKI docker](https://github.com/PaloAltoNetworks/pan-os-php/wiki/docker)


* **MacOS** : [run on MacOS terminal]
```bash
cd [pan-os-php Root folder]
docker build -t pan-os-php -f docker/Dockerfile .
cd [go to the Folder you like to share with the Container]
docker run --name panosphp --rm -v ${PWD}:/share -it pan-os-php
```

* **WINDOWS** : [run on Windows terminal]
```bash
cd [pan-os-php Root folder]
docker build -t pan-os-php -f docker/Dockerfile .
cd [go to the Folder you like to share with the Container]
docker run --name panosphp --rm -v "%CD%":/share -it pan-os-php
```

----------------
local Development Container:
```bash
CLI: pan-os-php type=address listactions
API: http://localhost:8082/utils/api/v1/tool.php/address?listactions
```
docker run -d -p 8082:80 --mount type=bind,source="[absolute_ROOTFOLDER]/pan-os-php",target=/var/www/html -v [absolute_ROOTFOLDER]/pan-os-php/var/docker/uploads.ini:/usr/local/etc/php/conf.d/uploads.ini php:apache
```
2 changes: 1 addition & 1 deletion docker/Dockerfile-API
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM php:8.0-apache
FROM php:8.1-apache


SHELL ["/bin/bash", "-c"]
Expand Down
Loading

0 comments on commit b07de57

Please sign in to comment.