Panorama displays recurring candidate config with changes associated with __kubernetes

Panorama displays recurring candidate config with changes associated with __kubernetes

5521
Created On 07/21/22 00:16 AM - Last Modified 06/05/23 21:23 PM


Symptom


Check the Configuration logs on Panorama to view the changes, and the Administrator name:
image.png

The Config Audit option can be used to view the difference in the Local Running Config and the Local Candidate Config

image.png

Environment


 

 Product

 PAN-OS

 Panorama

 Any Supported Version (10.0.0 and above)

 Plugin

 Version

 Kubernetes

 Any

Cause


When 'Monitoring Definition' is configured on Panorama under the Kubernetes plugin, the plugin automatically creates service objects in Panorama Device Group when a service is created or modified on the monitored Kubernetes clusters.

Resolution


Execute the below command to stop the plugin from creating these service objects.
> request plugins kubernetes manage-service-objects disable
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CqgJCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language