Package: skilletlib
SkilletlibBase Classes and Utilities for working with Skillets in Python 3.7+. Skilletlib encapsulates all the logic necessary to
execute a skillet in your app or tooling.Seeherefor information about Skillets and
what skillets may be available.About SkilletsSkillets are designed to be sharable units of configuration or validation data. They are perfectly suited for
'Compliance as Code' or 'Infrastructure as Code' type environments. All the 'knowledge' of doing a thing is encapsulated
in the skillet. Skillets strive to be tooling agnostic. A subject matter expert should not have to define best
practices in multiple domain specific languages. Ideally, this should be expressed once, and executed in a variety of
tools. Skilletlib makes it easy to allow Skillets to be executed in your tooling of choice.Skillets are meant to be stored and shared via source control repositories along with the rest of your infrastructure.
This allows complex NGFW configurations and use case specific compliance checks to be executed as part of your
deployment pipeline.ResourcesInformation on building Skillets and working with the PAN-OS XML APIExample SkilletsPAN-OS XML QuickstartPAN-OS Exploring the APIInstallationSkilletlib is distributed as a python shared library onpypi.org.pipinstallskilletlibExample Loading a SkilletfromskilletlibimportSkilletLoader# init SkilletLoader Classsl=SkilletLoader()# Load the skillet found in the current directoryskillet=sl.load_skillet_from_path('.')# Every skillet requires a context, which is a dict containing# any user-input or other variables to allow customization.context=dict()# In this example, our skillet needs a configuration.xml file to be loaded into a variable# called 'config'withopen('config.xml','r')asconfig:context['config']=config.read()# execute the skillet and return the resultsout=skillet.execute(context)# Do something interesting with the results, like print it out :-)print(out)print('all done')Loading Skillets from a Git repositoryfromskilletlibimportSkilletLoaderrepo_url='https://github.com/nembery/Skillets'repo_branch='develop'directory='/var/tmp/skillets'repo_name='example skillets'sl=SkilletLoader()skillets=sl.load_from_git(repo_url,repo_name,repo_branch,local_dir=directory)forsinskillets:print(s.name)using Skilletlib to find recent changes in Set CLI Formatimportos# The Panos class is a wrapper around the XML API that provides some convience methodsfromskilletlibimportPanosauth={'hostname':os.environ.get('ip_address',''),'api_username':os.environ.get('username',''),'api_password':os.environ.get('password',''),'debug':os.environ.get('debug',True),}device=Panos(**auth)# you can pass negative integers to the 'get_configuration' method to retrive the most to least recent# running configurations. This is very useful to finding the Set CLI or XML equivelent of GUI configuration# changesprevious_config=device.get_configuration(config_source='-1')latest_config=device.get_configuration(config_source='running')# The 'generate_set_cli_from_configs' method returns the difference between two config files. In this case,# we'll use the running config and the most recent running config audit backup. This will give us all the# changes made via the most recent commit in Set CLI formatcmds=device.generate_set_cli_from_configs(previous_config,latest_config)forcmdincmds:print(cmd)Other projects that use SkilletlibHere are a couple of examples of other projects that use skilletlibPanhandlerPanhandler is a tool to manage collections of Skillets and their respective git repositoriesSLISLI is a CLI interface to Skilletlib. This tool allows rapid testing and prototyping of SkilletsSkilletLoaderSkilletLoader is a tool to load and test skillets in a CI/CD pipeline via DockerAnsible SkilletsAnsible roles and libraries for loading PAN-OS and related skillets via Ansible playbooksDemisto XSOAR IntegrationExperimental in development Demisto XSOAR integrationOther utilities in SkilletlibSkilletlib also includes a collection of tools and methods called
'Panoply' which eases working with emphemeral PAN-OS and
Panorama devices, such as in a CI/CD Pipeline or development environment.SupportCommunity SupportedThe software and templates in the repo are released under an as-is, best effort,
support policy. This software should be seen as community supported and Palo
Alto Networks will contribute our expertise as and when possible. We do not
provide technical support or help in using or troubleshooting the components of
the project through our normal support options such as Palo Alto Networks
support teams, or ASC (Authorized Support Centers) partners and backline support
options. The underlying product used (the VM-Series firewall) by the scripts or
templates are still supported, but the support is only for the product
functionality and not for help in deploying or using the template or script
itself. Unless explicitly tagged, all projects or work posted in our GitHub
repository (athttps://github.com/PaloAltoNetworks) or sites other than our
official Downloads page onhttps://support.paloaltonetworks.comare provided
under the best effort policy.