Validating the CN-Series HSF Deployment
Table of Contents
11.0
Expand all | Collapse all
-
- CN-Series Key Concepts
- CN-Series Core Building Blocks
- Components Required to Secure Kubernetes Clusters with CN-Series Firewall
- CN-Series Deployment—Supported Environments
- CN-Series System Requirements
- Quickstart- CN-Series Firewall Deployment
- CN-Series Performance and Scaling
- Additional CN-Series Resources
-
- CN-Series Deployment Checklist
- CN-Series Prerequisites
- Install a Device Certificate on the CN-Series Firewall
- Create Service Accounts for Cluster Authentication
- Install the Kubernetes Plugin and Set up Panorama for CN-Series
- Get the Images and Files for the CN-Series Deployment
- Editable Parameters in CN-Series Deployment YAML Files
- Enable Horizontal Pod Autoscaling on the CN-Series
- Secure 5G With the CN-Series Firewall
- Enable Inspection of Tagged VLAN Traffic
- Enable IPVLAN
- Uninstall the Kubernetes Plugin on Panorama
- Features Not Supported on the CN-Series
-
- CN-Series HSF System Requirements
- Configure Traffic Flow Towards CN-Series HSF
- Test Case: Layer 3 BFD Based CN-GW Failure Handling
- View CN-Series HSF Summary and Monitoring
- Validating the CN-Series HSF Deployment
- Custom Metric Based HPA Using KEDA in EKS Environments
- Features Not Supported on the CN-Series
Validating the CN-Series HSF Deployment
You can validate the CN-Series HSF deployments in the
. Click the link under
Deployment
section under Panorama
Kubernetes
Deployment Status
to view
the details of the deployment.The deployed pods and their current status is color coded and displayed in the
Deployment Status
section. You can click on the link under
the Note
against the failed pod deployment to see more
details.

Use the following commands in the Panorama CLI to generate logs.
debug plugins kubernetes generate-pod-log deployment_name pod_name <value> Name of the pod
show plugins kubernetes deployment-status
show plugins kubernetes deployment-details name
Debugging Sync Issues between the Kubernetes Plugin and CN-Series HSF
The Kubernetes plugin collects information about the CN-Series HSF from
Pods, Services, and Nodes using Watch APIs. The Watch API is a notification based
API which sends updates when the state of a cluster changes. To ensure that the
plugin and the deployed CN-Series HSF are in sync, the plugin listens to
notifications and displays HPA and upgrade/downgrade event notifications.
The plugin uses the following debug commands to debug a specific node based on the
plugin status.
debug plugin kubernetes kubectl-logs pod <pod-name>
This debug command generates a log file that contains the
kubectl
describe logs for the node passed in the command, and is saved in the plugin logs
file.