Deploy the Prisma Cloud Console on AKS

Use the following procedure to install Prisma Cloud in an AKS cluster. This setup uses dynamic PersistentVolumeClaim provisioning using Premium Azure Disk. When creating your Kubernetes cluster, be sure to specify a VM size that supports premium storage.

Prisma Cloud doesn’t support Azure Files as a storage class for persistent volumes. Use Azure Disks instead.

Prerequisites

• You have deployed an Azure Container Service (AKS) cluster. Use the --node-vm-size parameter to specify a VM size that supports Premium Azure Disks.
• You have installed Azure CLI 2.0.22 or later.
• You have downloaded the Prisma Cloud command-line utility.

1. Use twistcli to generate the Prisma Cloud Console YAML configuration file, where <PLATFORM> can be linux or osx. Set the storage class to Premium Azure Disk.

     $ <PLATFORM>/twistcli console export kubernetes \
       --storage-class managed-premium \
       --service-type LoadBalancer

2. Deploy the Prisma Cloud Console in the Azure Kubernetes Service cluster.

     $ kubectl create -f ./twistlock_console.yaml

3. Wait for the service to come up completely.

     $ kubectl get service -w -n twistlock

4. Change the reclaimPolicy of the PersistentVolumeClaim.

     $ kubectl get pv
     $ kubectl patch pv <pvc-name> -p '{"spec":{"persistentVolumeReclaimPolicy":"Retain"}}'

5. Next, configure the Prisma Cloud console.