topic Prisma Cloud Compute Defender missing iptables executables in Prisma Cloud Discussions

Prisma Cloud Compute Defender missing iptables executables

McLeroy — Wed, 01 Jun 2022 15:35:18 GMT

I'm using Compute Edition 22.01.880 in a Kubernetes cluster. Under Radars > Settings > Network Monitoring, I have container and host network monitoring turned on. I deploy the Defenders to the Kubernetes nodes using a DaemonSet. When I look at the logs for the Defender, I see a lot of the following errors:

`failed to save iptables Twistlock defender completed with an error: exec: "iptables-save": executable file not found in $PATH exit status 1`
`failed to restore iptables Twistlock defender completed with an error: exec: "iptables-restore": executable file not found in $PATH exit status 1`

If I shell into the Defender pod, I cannot find any executables for `iptables-*`. And, I think that this is causing my Containers Radar to not show network connections.

Am I misconfiguring something? Or do the Defender images need the executables added from Palo Alto?

Re: Prisma Cloud Compute Defender missing iptables executables

RPrasadi — Thu, 14 Jul 2022 01:32:41 GMT

The error message below could be related to an issue with k8s kube proxy. Please consider reviewing the logs in the kube-proxy pods in kube-system namespace for clues and verify the logs from the defender pods are coming from /var/lib/twistlock/log/defender.log. If the kube-proxy logs do not provide any useful information you can recycle the kube-proxy pods to help clean things up as well. k8s will create new ones for you. If the logs from /var/lib/twistlock/log/defender.log on the defender do not provide any clues and restarting the kube-proxy pods do not help, please contact support so we can assist further.
error:
`failed to save iptables Twistlock defender completed with an error: exec:

"iptables-save": executable file not found in $PATH exit status 1`
`failed to restore iptables Twistlock defender completed with an error: exec:

"iptables-restore": executable file not found in $PATH exit status 1`