paloaltonetworks / skilletbuilder

Docs and tutorial for Skillet template building

SkilletBuilder

Docs, tools and tutorial for Skillet Building

The Skillet Builder documentation provides detailed information for each builder tool.

Using these tools, it is possible to manually configure a NGFW, then generate a skillet from those changes. That skillet can then be used to configure N number of other NGFWs with some light editing to add variables.

There is also a tutorial branch walking the user through an example Skillet use case.

Quick start

You can use Appetizer to quickly spin up a Skillet Builder container to test these tools:

docker run -it --rm -p 8088:8080 -e 'REPO=https://github.com/PaloAltoNetworks/SkilletBuilder.git' \
  -e 'BRANCH=develop' \ 
  --name "Skillet Builder" registry.gitlab.com/panw-gse/as/appetizer

Usage in Panhandler

These tools require the latest Panhandler container, which can be found in the Panhandler Docs.

Support Policy

The code and templates in the repo are released under an as-is, best effort, support policy. These scripts should be seen as community supported and Palo Alto Networks will contribute our expertise as and when possible. We do not provide technical support or help in using or troubleshooting the components of the project through our normal support options such as Palo Alto Networks support teams, or ASC (Authorized Support Centers) partners and backline support options. The underlying product used (the VM-Series firewall) by the scripts or templates are still supported, but the support is only for the product functionality and not for help in deploying or using the template or script itself. Unless explicitly tagged, all projects or work posted in our GitHub repository (at https://github.com/PaloAltoNetworks) or sites other than our official Downloads page on https://support.paloaltonetworks.com are provided under the best effort policy.

skilletbuilder's Issues

[Community Health Assessment] Changes needed

Health Check	Pass	Score	More Info
Contains a meaningful README.md file	✅	20 / 20	More info
SUPPORT.md file exists	✅	20 / 20	More info
Repo has a description	✅	15 / 15	More info
Has a recognized open source license	✅	15 / 15	More info
Has a descriptive repo name	✅	15 / 15	More info
Required topics attached to repo	✅	15 / 15	More info
CONTRIBUTING.md file with contribution guidelines	❌	0 / 5	More info
Has custom issue and pull request templates	❌	0 / 5	More info

Current score: 100
Target threshold: 100
Total possible: 110

Unable to output json snippets in generated skillet

Describe the bug

When trying to execute "Generate Skillet" in PanHandler, nothing is generated in the snipets section of the generated yaml file.

Expected behavior

Print the output of the generate_skillet_snippets.py in the snippets section of the generated skillet.

Current behavior

Nothing in the snippets section

Possible solution

Sound that the output of generate_skillet_snippets.py is not parsed correctly in json format.

Steps to reproduce

1. In PanHandler ui launch "Generate a Skillet"

2. Select From Running NGFW

3. Configuration changes are retrieved successfuly
   

4. Snippets section of the generated skillet is empty
   

The snippets variable seems empty, I've added this line in skeleton_xml/meta-cnc-skeleton.conf to check : {{ snippets|pprint }}

Context / Environment

Just trying to generate a skillet from a running PA-3020 PANOS v9.1.8

• Version used:
• Environment name and version : 4.0 docker paloaltonetworks/panhandler:latest
• Operating System and version : Windows 10 Docker Engine v20.10.2