Defender daemonset deployment in Alibaba Kubernetes Cluster

Defender daemonset deployment in Alibaba Kubernetes Cluster

79
Created On 07/16/26 20:48 PM - Last Modified 07/31/26 22:16 PM


Symptom


Cluster name does not get resolved to the actual name of the cluster in Prisma when deploying the defender daemonset in Alibaba Kubernetes Cluster



Environment


**Product_versions**
• Product: Prisma Cloud Compute

**Topology/Configuration**
Alibaba Kubernetes Cluster (ACK)



Cause


This is how the cluster name resolution algorithm works on the defender side:

  1. A general cluster discovery routine looks for well-known kubelet configuration files like /etc/kubernetes/kubelet.conf/var/lib/kubelet/kubelet.conf/etc/eksctl/kubeconfig.yaml and others. If one of them is found, we look for the "server" section within the file and we strip any "https" prefix and ports from it. 
  2. After that, A cloud-specific resolver overrides the previous stage. We currently don't have cloud resolvers for ACK. So in this stage we don't override the previous result like we do for other clouds like AWS, GCP, Azure.
  3. This may lead to inconsistent cluster name being shown in Prisma for e.g "apiserver" instead of the actual cluster name in ACK

 



Resolution


To avoid inconsistent cluster names in ACK, we need to set the cluster name manually as follows:

  1. Navigate to Manage > Defenders > Manual Deploy > Advanced Settings.
  2. Change 'Cluster name resolving method' to 'Manual' from the dropdown.
  3. Enter your cluster name in the 'Specify a cluster name' field.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA1Ki000000kC1mKAE&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail