UPDATES:
- Updated the provider to use the Terraform Plugin SDK (#220)
UPDATES:
- The provider can now manage XFR PAN-OS releases (#216)
- New optional provider param:
verify_certificate
(#218)
NEW DATA SOURCES:
panos_panorama_plugin
(#178)
NEW RESOURCES:
panos_gre_tunnel
/panos_panorama_gre_tunnel
(#162)panos_monitor_profile
/panos_panorama_monitor_profile
(#182)panos_panorama_gcp_account
(#179)panos_panorama_gke_cluster
(#181)panos_panorama_gke_cluster_group
(#180)panos_pbf_rule_group
/panos_panorama_pbf_rule_group
(#152)panos_vlan
/panos_panorama_vlan
(#145)panos_aggregate_interface
/panos_panorama_aggregate_interface
(#169)panos_vlan_entry
/panos_panorama_vlan_entry
(#146)panos_layer3_subinterface
/panos_panorama_layer3_subinterface
(#195)panos_layer2_subinterface
/panos_panorama_layer2_subinterface
(#82)panos_application_object
/panos_panorama_application_object
(#197)panos_application_group
/panos_panorama_application_group
(#198)panos_application_signature
/panos_panorama_application_signature
(#201)panos_snmptrap_server_profile
/panos_panorama_snmptrap_server_profile
(#203)panos_syslog_server_profile
/panos_panorama_syslog_server_profile
(#83)panos_email_server_profile
/panos_panorama_email_server_profile
(#206)panos_http_server_profile
/panos_panorama_http_server_profile
(#207)panos_log_forwarding_profile
/panos_panorama_log_forwarding_profile
(#84)
NEW PARAMS ADDED TO:
panos_address_object
/panos_panorama_address_object
(#174)panos_ethernet_interface
/panos_panorama_ethernet_interface
(#173)panos_service_object
/panos_panorama_service_object
(#175)
BUG FIXES:
- The ordering for administrative tags on objects (such as address objects or address groups) is now preserved (#161)
- The ordering for various list params in
panos_nat_rule_group
/panos_panorama_nat_rule_group
is now ignored (#143) - New params added to
panos_nat_rule_group
/panos_panorama_nat_rule_group
to to replacestatic
anddynamic
asdynamic
is now a recursively reserved keyword in Terraform 0.12 (#167)
panos_ike_gateway
/panos_panorama_ike_gateway
-floating-ip
is now an accepted value forlocal_ip_address_type
(#158)panos_ike_gateway
/panos_panorama_ike_gateway
- Updated documentation fornat_traversal_keep_alive
(#97)- Fixed the acctest for
panos_panorama_nat_rule
(#147) - Properly handle when a list of strings is sent an empty string (#153)
- Updated the commit script given on the main documentation page to include more ways to specify auth credentials (#160)
- Updated to github.com/hashicorp/terraform@v0.12.0-rc1 (#158)
The following resources can no longer be imported, as they have encrypted fields (thus there is no way to verify the plain text version of those fields) [#139]:
panos_bgp_auth_profile
/panos_panorama_bgp_auth_profile
panos_edl
/panos_panorama_edl
panos_ike_gateway
/panos_panorama_ike_gateway
panos_ipsec_tunnel
/panos_panorama_ipsec_tunnel
NEW RESOURCES:
panos_bfd_profile
/panos_panorama_bfd_profile
(#107)panos_bgp
/panos_panorama_bgp
(#73)panos_bgp_aggregate
/panos_panorama_bgp_aggregate
(#124)panos_bgp_aggregate_advertise_filter
/panos_panorama_bgp_aggregate_advertise_filter
(#126)panos_bgp_aggregate_suppress_filter
/panos_panorama_bgp_aggregate_suppress_filter
(#128)panos_bgp_auth_profile
/panos_panorama_bgp_auth_profile
(#110)panos_bgp_conditional_adv
/panos_panorama_bgp_conditional_adv
,panos_bgp_conditional_adv_advertise_filter
/panos_panorama_bgp_conditional_adv_advertise_filter
, andpanos_bgp_conditional_adv_non_exist_filter
/panos_panorama_bgp_conditional_adv_non_exist_filter
(#122)panos_bgp_dampening_profile
/panos_panorama_bgp_dampening_profile
(#111)panos_bgp_export_rule_group
/panos_panorama_bgp_export_rule_group
(#120)panos_bgp_import_rule_group
/panos_panorama_bgp_import_rule_group
(#118)panos_bgp_peer
/panos_panorama_bgp_peer
(#116)panos_bgp_peer_group
/panos_panorama_bgp_peer_group
(#114)panos_bgp_redist_rule
/panos_panorama_bgp_redist_rule
(#130)panos_nat_rule_group
/panos_panorama_nat_rule_group
(#78)panos_redistribution_profile_ivp4
/panos_panorama_redistribution_profile_ipv4
(#92)
ENHANCEMENTS:
DEPRECATED RESOURCES:
panos_nat_rule
/panos_panorama_nat_rule
are both deprecated. Please usepanos_nat_rule_group
/panos_panorama_nat_rule_group
instead.
NEW RESOURCES:
panos_virtual_router_entry
andpanos_panorama_virtual_router_entry
(#71)panos_zone_entry
andpanos_panorama_zone_entry
(#74)
BUG FIXES:
- Panorama device groups no longer require a description. (#81)
- Panorama template stacks can now define a
default_vsys
(#85)
NEW FEATURES:
- Support for both templates and template stacks has been added to the provider. When defining your resource, use either the
template
variable if you want to attach it to a template, ortemplate_stack
if you want to attach it to a template stack.
NEW DATA SOURCES:
panos_dhcp_interface_info
(#35)
NEW RESOURCES:
panos_ike_crypto_profile
andpanos_panorama_ike_crypto_profile
(#37)panos_ipsec_crypto_profile
andpanos_panorama_ipsec_crypto_profile
(#38)panos_tunnel_interface
andpanos_panorama_tunnel_interface
(#42)panos_ike_gateway
andpanos_panorama_ike_gateway
(#39)panos_ipsec_tunnel
,panos_ipsec_tunnel_proxy_id_ipv4
,panos_panorama_ipsec_tunnel
, andpanos_panorama_ipsec_tunnel_proxy_id_ipv4
(#28)panos_edl
andpanos_panorama_edl
(#27)panos_loopback_interface
andpanos_panorama_loopback_interface
(#41)panos_vlan_interface
andpanos_panorama_vlan_interface
(#40)panos_static_route_ipv4
andpanos_panorama_static_route_ipv4
(#30)panos_panorama_template
,panos_panorama_template_entry
,panos_panorama_template_stack
,panos_panorama_template_stack_entry
, andpanos_panorama_template_variable
(#43)panos_license_api_key
andpanos_licensing
(#24)panos_panorama_management_profile
(#58)panos_panorama_ethernet_interface
(#60)panos_panorama_zone
(#62)panos_panorama_virtual_router
(#64)
RENAMED RESOURCES:
The following resources have been renamed for clarity from their original names. Both the old name and the new name will work right now, but please update your plans to use the new names as the original names may be removed / repurposed in the future.
panos_nat_policy
is nowpanos_nat_rule
(#34)panos_security_policies
is nowpanos_security_policy
(#34)panos_security_policy_group
is nowpanos_security_rule_group
(#34)panos_panorama_nat_policy
is nowpanos_panorama_nat_rule
(#34)panos_panorama_security_policies
is nowpanos_panorama_security_policy
(#34)panos_panorama_security_policy_group
is nowpanos_panorama_security_rule_group
(#34)
FEATURES:
- New Resource:
panos_telemetry
(#31) - New Resource:
panos_security_policy_group
(#20] [#32) - New Resource:
panos_panorama_security_policy_group
(#20] [#32)
NOTES:
- The new
DatType
param is now required if you are doing destination address translation in your NAT policies. This applies to bothpanos_nat_policy
andpanos_panorama_nat_policy
. Please update your plan files accordingly.
ENHANCEMENTS:
panos_nat_policy
andpanos_panorama_nat_policy
now support PAN-OS 8.1's dynamic destination NAT address type (#25] [#33)
FIXES:
FEATURES:
- New Feature: Added Panorama support (#3)
- New Feature: Added support for credentials file for provider config (#5)
- New Resource:
panos_panorama_address_group
- New Resource:
panos_panorama_address_object
- New Resource:
panos_panorama_administrative_tag
- New Resource:
panos_panorama_device_group
- New Resource:
panos_panorama_device_group_entry
- New Resource:
panos_panorama_nat_policy
- New Resource:
panos_panorama_security_policies
- New Resource:
panos_panorama_service_group
- New Resource:
panos_panorama_service_object
ENHANCEMENTS:
panos_nat_policy
: Therulebase
parameter has been deprecated. You can safely remove this from your plan files.panos_security_policies
: Therulebase
parameter has been deprecated. You can safely remove this from your plan files.
FEATURES:
- New Data Source:
panos_system_info
- New Resource:
panos_address_group
- New Resource:
panos_address_object
- New Resource:
panos_administrative_tag
- New Resource:
panos_dag_tags
- New Resource:
panos_ethernet_interface
- New Resource:
panos_general_settings
- New Resource:
panos_management_profile
- New Resource:
panos_nat_policy
- New Resource:
panos_security_policies
- New Resource:
panos_service_group
- New Resource:
panos_service_object
- New Resource:
panos_virtual_router
- New Resource:
panos_zone