CN-Series Firewall Deployment Modes
  • CN-Series Firewall Deployment Modes
  • CN-Series Documentation
  • All Documentation
>
Uninstall the Kubernetes Plugin on Panorama
Focus
Download PDF
Focus
  1. Home
  2. CN-Series
  3. CN-Series Firewall Deployment Modes
  4. Deploy the CN-Series Firewalls
  5. Uninstall the Kubernetes Plugin on Panorama
Download PDF
CN-Series

Uninstall the Kubernetes Plugin on Panorama

Table of Contents

Uninstall the Kubernetes Plugin on Panorama

Review the workflow to uninstall the Kubernetes plugin on Panorama so that you can successfully return all tokens to the Palo Alto Networks licensing servers.
Use the following workflow to uninstall the Kubernetes plugin on Panorama so that you can successfully return all tokens to the Palo Alto Networks licensing servers, and then clear the authcode. This workflow enables you to ensure that the tokens are available for use on another Panorama.If you have deployed your Panorama management server in a high-availability configuration, you must complete the steps on the active-primary Panorama before you move to the passive-primary Panorama peer.
  1. Log in to your active-primary Panorama peer, if deployed in an HA configuration.
    1. Remove all the cluster configuration from the plugin.
      1. Delete the monitoring definitions.
        Select PluginsKubernetesMonitoring Definition, select the monitoring definitions and Delete.
      2. Delete the Kubernetes cluster definitions.
        Select PluginsKubernetesSet upCluster, select the cluster definitions and Delete.
    2. Commit your changes on Panorama.
      CommitCommit to Panorama.
    3. Verify that the used tokens count is zero.
      To confirm that all the tokens are returned back to the licensing server.
    4. Perform a clear authcode and make sure the license column authcode is None.
    5. Remove configuration and commit your changes.
      1. Select Plugins and find the Kubernetes plugin version you have installed, and Remove Config.
      2. CommitCommit to Panorama.
    6. Uninstall the Kubernetes plugin.
    7. Suspend the active Panorama peer.
      Select PanoramaHigh Availability, and then click Suspend local Panorama link in the Operational Commands section.
  2. Log in to your other Panorama peer.
    Now this peer is the active-secondary peer.
    1. Select Plugins and find the Kubernetes plugin version you have installed, and Remove Config.
    2. Uninstall the plugin.
      1. Select Plugins and find the Kubernetes plugin version you have installed, and Uninstall.
      2. Verify that the uninstall was successful.

Clear the Auth Code for the CN-Series Firewalls on Panorama

Use the workaround listed below only if you removed the plugin configuration and committed your changes before clearing the authcode. This workaround enables you to release the toekns back to the licensing server so that you can use it on another Panorama appliance.
  1. 1. Add a new plugin user and commit your changes.
    1. Select PanoramaAdministrators.
    2. Add a new user called __kubernetes.
    3. CommitCommit to Panorama.
  2. Clear the auth code on Panorama.
    1. Select PanoramaPluginsKubernetesSetupLicenses.
    2. Select Activate/update using authorization code, and Clear Auth Code.
    3. Verify that the license column displays auth code None.
  3. Delete the plugin user __kubernetes you created in Step 1.
  4. Commit your changes.
  5. Uninstall the plugin.
    1. Select Plugins and find the Kubernetes plugin version you have installed, and Uninstall.
    2. Verify that the uninstall was successful.

Technical Documentation

Company

Legal Notices

© 2025 Palo Alto Networks, Inc. All rights reserved.