How do we deploy defender on windows kubernetes

[AMabrouk]

Hi,

It has been a real pain trying to work out how to deploy Prisma defender on Kubernetes AKS cluster windows nodes after following this site instructions but no joy: Kubernetes (paloaltonetworks.com) 

Can anyone help please?

Thank you

Abdel

[AKing9]

Greetings AMabrouk,

I hope that this note finds you well! I know that it has been a while since you had posted this question but I wanted to see if you still potentially needed any help. Thank you for your time and I hope that you have a good remainder of your day.

Kind Regards,

J. Avery King

[MDavis29]

AMabrouk,

Please allow me a few cycles to deploy a lab environment and test this for you.  Staging AKS with windows nodepools requires a little extra effort but let me try the deployment and provide feedback.

[MDavis29]

After testing this in my lab I discovered we do not support deploying a defender to AKS with windows nodes.  The defender pod will fail and stay in a container creating status.  To deploy a defender to a AKS cluster with windows nodes currently you will need to deploy as a Single Defender, Chose the defender type as Host - Defender Windows, RDP into the windows node and run the install script.  Azure offers a bastion server option to assist with accessing the node.

[KSLee]

Yes, this is the only workaround now, but please take note that the windows node will not show inside the AKS cluster but will show as a non-cluster container (Single Defender).