Error deploying Defender in Kubernetes

[Verac22]

We are attempting to deploy defenders in Kubernetes. We are cloud hosted prisma console. And checked through the kubernetes requirements and those seem to meet.

Uploaded the twistcli and ran the script that we generated in the console. We got the following error:

failed to generate defender daemonset: Status: 401 Unauthorized
POST https://us-west1.coud.twistlock.com/redacted/api/v30.00/defenders/daemonset.yaml  failed.
Error: invalid token

Any idea where I should look for troubleshooting.

[USheikh]

Hello!

Thank you for reaching to Palo Alto Networks Support. My name is Umer, and I am part of Prisma Cloud Compute Support team. I will be assisting you with your question.

If you are using SaaS version of the console, then you will need to generate an Access Key by going under Setting > Access Control .

Here is Prisma Cloud Compute's documentation to generate a yaml file from API:

https://pan.dev/compute/api/post-defenders-daemonset-yaml/

Hope it helps! Let me know if you have any follow up questions.

Regards,

[Verac22 · Accepted solution]

We found the issue was that the deploy script was being used too long after generation and thus invalidating the generated tokens. Pulled a fresh script from the console and the install happened fine.