>
    Uninstall the Kubernetes Plugin on Panorama
    Focus
    Download PDF
    Focus
    1. Home
    2. CN-Series
    3. CN-Series Firewall Deployment Modes
    4. Deploy the CN-Series Firewalls
    5. Uninstall the Kubernetes Plugin on Panorama
    Download PDF
    CN-Series

    Uninstall the Kubernetes Plugin on Panorama

    Table of Contents

    Uninstall the Kubernetes Plugin on Panorama

    Review the workflow to uninstall the Kubernetes plugin on Panorama so that you can successfully return all tokens to the Palo Alto Networks licensing servers.
    Use the following workflow to uninstall the Kubernetes plugin on Panorama so that you can successfully return all tokens to the Palo Alto Networks licensing servers, and then clear the authcode. This workflow enables you to ensure that the tokens are available for use on another Panorama.If you have deployed your Panorama management server in a high-availability configuration, you must complete the steps on the active-primary Panorama before you move to the passive-primary Panorama peer.
    1. Log in to your active-primary Panorama peer, if deployed in an HA configuration.
      1. Remove all the cluster configuration from the plugin.
        1. Delete the monitoring definitions.
          Select PluginsKubernetesMonitoring Definition, select the monitoring definitions and Delete.
        2. Delete the Kubernetes cluster definitions.
          Select PluginsKubernetesSet upCluster, select the cluster definitions and Delete.
      2. Commit your changes on Panorama.
        CommitCommit to Panorama.
      3. Verify that the used tokens count is zero.
        To confirm that all the tokens are returned back to the licensing server.
      4. Perform a clear authcode and make sure the license column authcode is None.
      5. Remove configuration and commit your changes.
        1. Select Plugins and find the Kubernetes plugin version you have installed, and Remove Config.
        2. CommitCommit to Panorama.
      6. Uninstall the Kubernetes plugin.
      7. Suspend the active Panorama peer.
        Select PanoramaHigh Availability, and then click Suspend local Panorama link in the Operational Commands section.
    2. Log in to your other Panorama peer.
      Now this peer is the active-secondary peer.
      1. Select Plugins and find the Kubernetes plugin version you have installed, and Remove Config.
      2. Uninstall the plugin.
        1. Select Plugins and find the Kubernetes plugin version you have installed, and Uninstall.
        2. Verify that the uninstall was successful.

    Clear the Auth Code for the CN-Series Firewalls on Panorama

    Use the workaround listed below only if you removed the plugin configuration and committed your changes before clearing the authcode. This workaround enables you to release the toekns back to the licensing server so that you can use it on another Panorama appliance.
    1. 1. Add a new plugin user and commit your changes.
      1. Select PanoramaAdministrators.
      2. Add a new user called __kubernetes.
      3. CommitCommit to Panorama.
    2. Clear the auth code on Panorama.
      1. Select PanoramaPluginsKubernetesSetupLicenses.
      2. Select Activate/update using authorization code, and Clear Auth Code.
      3. Verify that the license column displays auth code None.
    3. Delete the plugin user __kubernetes you created in Step 1.
    4. Commit your changes.
    5. Uninstall the plugin.
      1. Select Plugins and find the Kubernetes plugin version you have installed, and Uninstall.
      2. Verify that the uninstall was successful.

    © 2024 Palo Alto Networks, Inc. All rights reserved.