1. Home
    2. Prisma
    3. Prisma Cloud
    4. Prisma Cloud Compute Edition Administrator’s Guide
    5. Configure
    6. Set different paths for Defender and Console (with DaemonSets)
    End-of-Life (EoL)

    Set different paths for Defender and Console (with DaemonSets)

    When using daemon sets, Console is set up to store the Prisma Cloud config under /opt/twistlock. By default, it uses this same config when installing the defenders. This article describes a work around solution to be able to set up different config paths for Console and Defenders using daemon sets
    1. Download Daemonset configurations for Defender.
      The API to download Daemonset Configuration is:
      /api/v1/defenders/daemonset.yaml?registry=${registry}&type=${DEFENDER_TYPE}
&consoleaddr=${consoleaddr}&namespace=${namespace}
&orchestration=${orchestration}&ubuntu=${os_ubuntu}"
      The parameters are:
      • registry
         --
        the registry from where Kubernetes gets the image, where you pushed the image. In the example above, the value will be “gcr.io/projectA/”
      • type
         --
        defender type - Daemon Set Docker on Linux or Daemon Set Kubernetes Node. (Daemon set Docker on Linux is the regular default Defender type, called in the UI Docker. Only difference being, unlike the default Defender, it does not listen to incoming traffic.
      • consoleaddr
         --
        Name or IP address that Defenders use to connect to Console.
      • namespace
         --
        the default when using the script is twistlock, but you can use whatever you want.
      • orchestration
         --
        OpenShift or Kubernetes
      • ubuntu
         --
        (ubuntu=true \ ubuntu=false), states if the cluster is running on ubuntu OS or not. If not provided, it’s assumed to be false.
    2. Edit the yaml file.
      Make the necessary changes in this yaml file and upload this modified version of the yaml to the K8 controller.

    Recommended For You

    Recommended Videos

    Recommended videos not found.

    © 2023 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo