The service account enables the permissions that Panorama requires to authenticate to the cluster for retrieving Kubernetes labels and resource information. This service account is named pan-plugin-user by default.
kubectl apply -f plugin-deploy-serviceaccount.yaml
kubectl apply -f pan-mgmt-serviceaccount.yaml
kubectl -n kube-system get secrets | grep pan-plugin-user-token
Create the credential file, cred.json for example, that includes the secrets and save this file. You need to upload this file to Panorama to set up the Kubernetes plugin for monitoring the clusters.
kubectl -n kube-system get secrets (secrets-from-above-command) -o json >> cred.json
Upload the cred.json to the kubernetes plugin and verify the validation status.
[https://docs.paloaltonetworks.com/cn-series/deployment/hsf-deployment/cn-series-hsf/prerequisites-to-deploy-the-cn-series-hsf/prepare-the-cluster]
"B" is the correct answer. Check out the "Service Account" section:
https://docs.paloaltonetworks.com/cn-series/deployment/hsf-deployment/cn-series-hsf/prerequisites-to-deploy-the-cn-series-hsf/prepare-the-cluster
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
3574e4e
1 month, 2 weeks agoDoobiedoo
3 months ago