Configure the Kubernetes Plugin for Panorama

Retrieve the pan-plugin-user service account credentials from the Kubernetes master.
Enter each command as a single line:
$ MY_TOKEN=`kubectl get serviceaccounts pan-plugin-user -n kube-system
  -o jsonpath='{.secrets[0].name}'`
$ kubectl get secret $MY_TOKEN -n kube-system -o json >
  ~/Downloads/pan-plugin-user.json
Create a Cluster definition in the Panorama Kubernetes plugin.
Use the Kubernetes master address displayed in the Terraform output and the JSON credentials file located at
~/Downloads/pan-plugin-user.json
.
Define the labels you want to import from the Kubernetes API.
Create a Notify Group definition in the Panorama Kubernetes plugin.
This definition is used to propagate the labels learned from the Kubernetes API to a Panorama Device Group.
Create a Monitoring Definition in the Panorama plugin.
Use the Cluster and Notify Group definitions created in the previous steps.
Commit to Panorama.
To confirm API connectivity and MP container registrations, go to the Monitoring Definition and click on the Detailed Status and Cluster MPs.
You are now ready to deploy an application and secure it with the CN-Series firewall.