How to install Prisma Cloud Compute console on Google Kubernetes engine

How to install Prisma Cloud Compute console on Google Kubernetes engine

0
Created On 10/25/21 23:41 PM - Last Modified 04/18/24 18:57 PM


Objective


This article will tell you how to deploy the Prisma Cloud Compute console on a Google Kubernetes engine.

Environment


  • Prisma Cloud Compute Self-Hosted version 21.04 and above
  • Google Cloud Platform (GCP)


Procedure


Please follow the following steps to deploy version 21_08_520 of the console on GKE:
  1. Log in to your GCP console and go to 
Kubernetes Engine > Cluster
  1. Click on Create to create a GKE Standard cluster.
  2. Provide the required information to create the cluster
    • Type the Name of the cluster
    • Select Location type of the cluster
    • Select Zone of the cluster
    • Select the Control Plane Version
    • Select the Release channel or leave the default value
    • Select the Version of the GKE cluster. It has to be 1.20.9-gke.1001 or above
    • Click Create to create the cluster.
Create GKE cluster
  1. Once the cluster is created, click Connect and select Run in shell
User-added image
  1. Once the shell is connected, press enter to execute the first command already typed in.
  2. Execute the following command
wget https://cdn.twistlock.com/releases/RP4y0BOd/prisma_cloud_compute_edition_21_08_520.tar.gz
  1. Unpack the tarball
mkdir prisma_cloud
tar xvzf prisma_cloud_compute_edition_21_08_520.tar.gz -C prisma_cloud/
  1. Generate a YAML configuration file for Console, where <PLATFORM> can be linux or osx.
<PLATFORM>/twistcli console export kubernetes --service-type LoadBalancer
  1. Type the Access Token you got when you got the License key of Prisma Cloud Compute.
  2. A file named twistlock_console.yaml will be created.
  3. Deploy Console
kubectl create -f twistlock_console.yaml
  1. Execute the following command to get the public endpoint address for Console.
kubectl get service -o wide -n twistlock
  1. Open a browser window, and navigate to Console. By default, Console is served on HTTPS on port 8083. For example, go to https://<EXTERNAL-IP>:8083
  2. Create your first admin user.
  3. Enter your Prisma Cloud license key.
  4. Go to the following section to deploy your defenders according to your requirements:
Manage > Defenders > Deploy


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMfzCAE&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail