CN-Series Deployment Guide
    : Uninstall the Kubernetes Plugin on Panorama
    Focus
    Download PDF
    Focus
    1. Home
    2. CN-Series
    3. CN-Series Deployment Guide
    4. Secure Kubernetes Workloads with CN-Series
    5. Uninstall the Kubernetes Plugin on Panorama
    Download PDF

    CN-Series Deployment Guide

    Uninstall the Kubernetes Plugin on Panorama

    Table of Contents

    Uninstall the Kubernetes Plugin on Panorama

    Review the workflow to uninstall the Kubernetes plugin on Panorama so that you can successfully return all tokens to the Palo Alto Networks licensing servers.
    Use the following workflow to uninstall the Kubernetes plugin on Panorama so that you can successfully return all tokens to the Palo Alto Networks licensing servers, and then clear the authcode. This workflow enables you to ensure that the tokens are available for use on another Panorama.If you have deployed your Panorama management server in a high-availability configuration, you must complete the steps on the active-primary Panorama before you move to the passive-primary Panorama peer.
    1. Log in to your active-primary Panorama peer, if deployed in an HA configuration.
      1. Remove all the cluster configuration from the plugin.
        1. Delete the monitoring definitions.
          Select
          Plugins
          Kubernetes
          Monitoring Definition
          , select the monitoring definitions and
          Delete
          .
        2. Delete the Kubernetes cluster definitions.
          Select
          Plugins
          Kubernetes
          Set up
          Cluster
          , select the cluster definitions and
          Delete
          .
      2. Commit your changes on Panorama.
        Commit
        Commit to Panorama
        .
      3. Verify that the used tokens count is zero.
        To confirm that all the tokens are returned back to the licensing server.
      4. Perform a clear authcode and make sure the license column authcode is None.
      5. Remove configuration and commit your changes.
        1. Select
          Plugins
           and find the Kubernetes plugin version you have installed, and
          Remove Config
          .
        2. Commit
          Commit to Panorama
          .
      6. Uninstall the Kubernetes plugin.
      7. Suspend the active Panorama peer.
        Select
        Panorama
        High Availability
        , and then click
        Suspend local Panorama
         link in the Operational Commands section.
    2. Log in to your other Panorama peer.
      Now this peer is the active-secondary peer.
      1. Select
        Plugins
         and find the Kubernetes plugin version you have installed, and
        Remove Config
        .
      2. Uninstall the plugin.
        1. Select
          Plugins
           and find the Kubernetes plugin version you have installed, and
          Uninstall
          .
        2. Verify that the uninstall was successful.

    Clear the Auth Code for the CN-Series Firewalls on Panorama

    Use the workaround listed below only if you removed the plugin configuration and committed your changes before clearing the authcode. This workaround enables you to release the toekns back to the licensing server so that you can use it on another Panorama appliance.
    1. 1. Add a new plugin user and commit your changes.
      1. Select
        Panorama
        Administrators
        .
      2. Add
         a new user called
        __kubernetes
        .
      3. Commit
        Commit to Panorama
        .
    2. Clear the auth code on Panorama.
      1. Select
        Panorama
        Plugins
        Kubernetes
        Setup
        Licenses
        .
      2. Select
        Activate/update using authorization code
        , and
        Clear Auth Code
        .
      3. Verify that the license column displays auth code
        None
        .
    3. Delete the plugin user
      __kubernetes
       you created in Step 1.
    4. Commit your changes.
    5. Uninstall the plugin.
      1. Select
        Plugins
         and find the Kubernetes plugin version you have installed, and
        Uninstall
        .
      2. Verify that the uninstall was successful.

    Recommended For You

    © 2023 Palo Alto Networks, Inc. All rights reserved.