cn series pan-ngfw pod not ready

[skchakraborty]

Hi All,

While working for CN series deployment, pan-ngfw pods are not becoming ready status , as getting this error in logs

Readiness probe failed: Panorama config is not pushed. pan_task is not running.

However, eks cluster monitoring status can show kube-system pod from panorama.

Can anyone guide for more debugging information.

Thanks in advance..

[Luongchacha1]

Hello skchakraborty,

Is there any update on this problem?. Have you fix this?

[skchakraborty]

@Luongchacha1 , due to time constaints I've to stop the project, but soon I will start the project agian. Are you also doing similar deployment or you have already done the deployment

[Luongchacha1]

Yes, i am, i catch similar error like ya.

[DNguyen46]

Hi, have you been able to fix that error? I'm having the same thing too

[YLesev]

The readiness probe for the ngfw pods, expects "trigger" from the pan-cni pods. (literally a specific directory to be created).
I'd start checking if everything with the pan-cni is good - they have to succeed "to inject" cni config to the nodes. For example (for a on-prem native kubernetes cluster) pan-cni populate the node (host) with some binaries, make some changes on the node (host) cni config files .. and then "marked" the success by creating a directory, which the ngfw pods "picks" as trigger to continue with the startup process (and the ngfw pods to become fully running)