topic Re: Why are EKS Clusters defended with daemonsets NOT rendering in PCC/Manage/Defenders/Manage DaemonSets? in Prisma Cloud Discussions

Why are EKS Clusters defended with daemonsets NOT rendering in PCC/Manage/Defenders/Manage DaemonSets?

TommyHunt — Wed, 16 Nov 2022 15:57:59 GMT

Navigating to PCC/Manage/Defenders/Manage DaemonSets, I see NO EKS daemonsets rendering in the console.

However, Cloud Discovery renders these two EKS clusters Defended=True.

What am I doing wrong? Is it supposed to work this way? Or, What have I misconfigured?

Re: Why are EKS Clusters defended with daemonsets NOT rendering in PCC/Manage/Defenders/Manage DaemonSets?

USheikh — Thu, 17 Nov 2022 00:05:23 GMT

Hi TommyHunt,

Can you share the logs from the defender?

Since it is not showing in the console, please navigate to /var/lib/twistlock/log in the EKS and share the defender.log file.

Regards,

Re: Why are EKS Clusters defended with daemonsets NOT rendering in PCC/Manage/Defenders/Manage DaemonSets?

TommyHunt — Fri, 18 Nov 2022 16:57:32 GMT

Hi @USheikh thanks for your response.

So I downloaded the defender's logs from the Prisma Cloud Compute (PCC)/Manage/Defenders console.

Is the attached an acceptable log?

I am also attaching the defender.yaml file.

Re: Why are EKS Clusters defended with daemonsets NOT rendering in PCC/Manage/Defenders/Manage DaemonSets?

USheikh — Tue, 22 Nov 2022 01:09:59 GMT

Hello Tommy,

Thank you for uploading the logs.

It looks like the defender is showing up in the console, but it is not showing up in the Daemonset tab.

Can you make sure to add the account in the cloud accounts section? For example, Compute > Manage > Cloud Accounts.

Once you have added the cloud account, can you check if the eks defender is showing up in the Daemonset tab?

Regards,

Re: Why are EKS Clusters defended with daemonsets NOT rendering in PCC/Manage/Defenders/Manage DaemonSets?

TommyHunt — Mon, 28 Nov 2022 18:51:45 GMT

@USheikh please carefully read the thread of conversation. You are "shooting from the hip."

Regarding your comment... "Can you make sure to add the account in the cloud accounts section? For example, Compute > Manage > Cloud Accounts."

The 2nd image of this conversation is a snapshot of the Compute/Manage/CloudAccounts console for this account.

The defenders and console appear to be connected, however, the defenders are not being rendered on specific pages of the console.

Do you have any other suggestions?

Re: Why are EKS Clusters defended with daemonsets NOT rendering in PCC/Manage/Defenders/Manage DaemonSets?

MDavis29 — Mon, 28 Nov 2022 17:46:41 GMT

Hello TommyHunt, Would you be open to creating a support ticket for this effort? I think creating one at this stage would be beneficial and help get your question answered. Your time is important to us and I recommend a live working session with my colleagues is in order. https://support.paloaltonetworks.com/Support/Index