Get the Images and Files for the CN-Series Deployment

Download the docker images and push it to your container registry.
Use the following instructions to get the YAML files from GitHub and to download the docker images from the Palo Alto Networks CSP and push it to your container registry before you continue to Deploy the CN-Series Firewalls.
  1. Download the docker images and YAML files.
    1. Get the compressed tar archives from the Palo Alto Networks Customer Support Portal (CSP).
      • PanOS_cn-10.0.0-b7.tgz - for CN-MGMT and CN-NGFW Pods.
      • Pan_cn_mgmt_init-1.0.0-b1-c1.tgz - for the init container that runs as a part of the CN-MGMT Pod.
      • Pan_cni-1.0.0-b1-c3.tgz - for the PAN-CNI Pod.
    2. Get the YAML files from GitHub.
      • Get the files from the Native-k8s folder for use with native Kubernetes on-premises or cloud deployments.
      • Get the files from the respective Managed Kubernetes folder for AKS, EKS, or GKE.
    3. Retrieve the docker images and push it to your container registry.
      For example, on a GKE deployment, you will upload the images to a Container Registry on GKE and get the image path for referencing in the YAML files.Use the following commands on a client system running the docker engine.
      1. Load the images.
        docker load -i PanOS_cn-10.0.0-b1.tgz
        docker load -i Pan_cn_mgmt-init-0.0.1-b1.tgz
        docker load -i Pan_cni-0.0.1-b1.tgz
        After these steps, "docker images" will display the image, for example, "paloaltonetworks/panos_cn_mgmt:10.0.0-b1".
      2. Tag these images to include your private registry detail.
        docker tag paloaltonetworks/panos_cn_mgmt:10.0.0-b1 <your_registry>/paloaltonetworks/panos_cn_mgmt:10.0.0-b1
        docker tag paloaltonetworks/panos_cn_ngfw:10.0.0-b1 <your_registry>/paloaltonetworks/panos_cn_ngfw:10.0.0-b1
        docker tag paloaltonetworks/pan_cn_mgmt_init:10.0.0-b1 <your_registry>/paloaltonetworks/pan_cn_mgmt_init:0.0.1-b1
        docker tag paloaltonetworks/pan_cni:10.0.0-b1 <your_registry>/paloaltonetworks/pan_cni:0.0.1-b1
      3. Push these images to your private registry.
        docker push <your_registry>/paloaltonetworks/panos_cn_mgmt:10.0.0-b1
        docker push <your_registry>/paloaltonetworks/panos_cn_ngfw:10.0.0-b1
        docker push <your_registry>/paloaltonetworks/pan_cn_mgmt_init:0.0.1-b1
        docker push <your_registry>/paloaltonetworks/pan_cni:0.0.1-b1

Recommended For You