topic Re: Error deploying Defender in Kubernetes in Prisma Cloud Discussions

Error deploying Defender in Kubernetes

Verac22 — Thu, 11 May 2023 13:16:21 GMT

We are attempting to deploy defenders in Kubernetes. We are cloud hosted prisma console. And checked through the kubernetes requirements and those seem to meet.

Uploaded the twistcli and ran the script that we generated in the console. We got the following error:

failed to generate defender daemonset: Status: 401 Unauthorized
POST https://us-west1.coud.twistlock.com/redacted/api/v30.00/defenders/daemonset.yaml failed.
Error: invalid token

Any idea where I should look for troubleshooting.

Re: Error deploying Defender in Kubernetes

USheikh — Fri, 12 May 2023 01:13:55 GMT

Hello!

Thank you for reaching to Palo Alto Networks Support. My name is Umer, and I am part of Prisma Cloud Compute Support team. I will be assisting you with your question.

If you are using SaaS version of the console, then you will need to generate an Access Key by going under Setting > Access Control .

Here is Prisma Cloud Compute's documentation to generate a yaml file from API:

https://pan.dev/compute/api/post-defenders-daemonset-yaml/

Hope it helps! Let me know if you have any follow up questions.

Regards,

Re: Error deploying Defender in Kubernetes

Verac22 — Thu, 15 Jun 2023 11:55:25 GMT

We found the issue was that the deploy script was being used too long after generation and thus invalidating the generated tokens. Pulled a fresh script from the console and the install happened fine.