How to install Prisma Cloud Compute console on Google Kubernetes engine
0
Created On 10/25/21 23:41 PM - Last Modified 04/18/24 18:57 PM
Objective
This article will tell you how to deploy the Prisma Cloud Compute console on a Google Kubernetes engine.
Environment
- Prisma Cloud Compute Self-Hosted version 21.04 and above
- Google Cloud Platform (GCP)
Procedure
Please follow the following steps to deploy version 21_08_520 of the console on GKE:
- Log in to your GCP console and go to
Kubernetes Engine > Cluster
- Click on Create to create a GKE Standard cluster.
- Provide the required information to create the cluster
- Type the Name of the cluster
- Select Location type of the cluster
- Select Zone of the cluster
- Select the Control Plane Version
- Select the Release channel or leave the default value
- Select the Version of the GKE cluster. It has to be 1.20.9-gke.1001 or above
- Click Create to create the cluster.
- Once the cluster is created, click Connect and select Run in shell
- Once the shell is connected, press enter to execute the first command already typed in.
- Execute the following command
wget https://cdn.twistlock.com/releases/RP4y0BOd/prisma_cloud_compute_edition_21_08_520.tar.gz
- Unpack the tarball
mkdir prisma_cloud
tar xvzf prisma_cloud_compute_edition_21_08_520.tar.gz -C prisma_cloud/
- Generate a YAML configuration file for Console, where <PLATFORM> can be linux or osx.
<PLATFORM>/twistcli console export kubernetes --service-type LoadBalancer
- Type the Access Token you got when you got the License key of Prisma Cloud Compute.
- A file named twistlock_console.yaml will be created.
- Deploy Console
kubectl create -f twistlock_console.yaml
- Execute the following command to get the public endpoint address for Console.
kubectl get service -o wide -n twistlock
- Open a browser window, and navigate to Console. By default, Console is served on HTTPS on port 8083. For example, go to https://<EXTERNAL-IP>:8083
- Create your first admin user.
- Enter your Prisma Cloud license key.
- Go to the following section to deploy your defenders according to your requirements:
Manage > Defenders > Deploy