End-of-Life (EoL)

Uninstall the Kubernetes Plugin on Panorama

Review the workflow to uninstall the Kubernetes plugin on Panorama so that you can successfully return all tokens to the Palo Alto Networks licensing servers.
Use the following workflow to uninstall the Kubernetes plugin on Panorama so that you can successfully return all tokens to the Palo Alto Networks licensing servers, and then clear the authcode. This workflow enables you to ensure that the tokens are available for use on another Panorama.If you have deployed your Panorama management server in a high-availability configuration, you must complete the steps on the active-primary Panorama before you move to the passive-primary Panorama peer.
  1. Log in to your active-primary Panorama peer, if deployed in an HA configuration.
    1. Remove all the cluster configuration from the plugin.
      1. Delete the monitoring definitions.
        Select
        Plugins
        Kubernetes
        Monitoring Definition
        , select the monitoring definitions and
        Delete
        .
      2. Delete the Kubernetes cluster definitions.
        Select
        Plugins
        Kubernetes
        Set up
        Cluster
        , select the cluster definitions and
        Delete
        .
    2. Commit your changes on Panorama.
      Commit
      Commit to Panorama
      .
    3. Verify that the used tokens count is zero.
      To confirm that all the tokens are returned back to the licensing server.
    4. Perform a clear authcode and make sure the license column authcode is None.
    5. Remove configuration and commit your changes.
      1. Select
        Plugins
        and find the Kubernetes plugin version you have installed, and
        Remove Config
        .
      2. Commit
        Commit to Panorama
        .
    6. Uninstall the Kubernetes plugin.
    7. Suspend the active Panorama peer.
      Select
      Panorama
      High Availability
      , and then click
      Suspend local Panorama
      link in the Operational Commands section.
  2. Log in to your other Panorama peer.
    Now this peer is the active-secondary peer.
    1. Select
      Plugins
      and find the Kubernetes plugin version you have installed, and
      Remove Config
      .
    2. Uninstall the plugin.
      1. Select
        Plugins
        and find the Kubernetes plugin version you have installed, and
        Uninstall
        .
      2. Verify that the uninstall was successful.

Clear the Auth Code for the CN-Series Firewalls on Panorama

Use the workaround listed below only if you removed the plugin configuration and committed your changes before clearing the authcode. This workaround enables you to release the toekns back to the licensing server so that you can use it on another Panorama appliance.
  1. 1. Add a new plugin user and commit your changes.
    1. Select
      Panorama
      Administrators
      .
    2. Add
      a new user called
      __kubernetes
      .
    3. Commit
      Commit to Panorama
      .
  2. Clear the auth code on Panorama.
    1. Select
      Panorama
      Plugins
      Kubernetes
      Setup
      Licenses
      .
    2. Select
      Activate/update using authorization code
      , and
      Clear Auth Code
      .
    3. Verify that the license column displays auth code
      None
      .
  3. Delete the plugin user
    __kubernetes
    you created in Step 1.
  4. Commit your changes.
  5. Uninstall the plugin.
    1. Select
      Plugins
      and find the Kubernetes plugin version you have installed, and
      Uninstall
      .
    2. Verify that the uninstall was successful.

Recommended For You