Twistlock supports deploying Console and Defenders into Kubernetes clusters.

July 28, 2022 - The addition of native Helm support, for example, allows Twistlock users to now “generate ready to run charts for both Console and Defender directly from twistcli,” according to the blog post. Other features of note include custom runtime rules with Kubernetes Audit logging, which will now “provide even more control over discrete runtime behaviors for both containers and hosts”, and expanded cloud discovery and compliance, which has been expanded to “cover all cloud native services on Azure and Google Cloud Platform and show rich metadata about each service directly in the Console web UI.”

This documentation demonstrates the automated installation and upgrade processes for the Prisma Cloud Compute Console and Defenders within a Kubernetes cluster that is able to communicate with the Kubernetes Community Operators and the Prisma Cloud Compute container registry. Create the namespace for this deployment (e.g. twistlock).

September 25, 2023 - Twistlock (Prisma Cloud) consists ... and serverless workloads: Defender Agents: These lightweight agents are deployed on container hosts, Kubernetes nodes, and serverless runtimes....

When using CI/CD pipeline, these API provides authentication and authorisation for people to deploy containers. Certificates are also registered in the API Servers · Twistlock runs on any implementation of Kubernetes such as ICP and IKS.

August 11, 2025 - $ <PLATFORM>./twistcli defender export kubernetes \ --address https://yourconsole.example.com:8083 \ --helm \ --user <ADMIN_USER_ACCESS_KEY> \ --cluster-address twistlock-console \ --container-runtime containerd

To get the required values for this Helm Chart to work download the Helm Chart from Prisma Cloud Compute Console by going to Manage > Defenders > Manual Deploy and Select the following paramaters: Deployment method: Orchestrator · Orchestrator type: Kubernetes or Openshift · All other basic and advanced settings will vary depending on your environment. Once chosen the appropriate options for you, then Download the Helm Chart: The file downloaded will be called twistlock-defender-helm.tar.gz.

Twistlock monitors Docker for container deployment and Kubernetes for container orchestration, along with other cloud platforms. Twistlock provides continuous monitoring of containers, in addition to multi-tenancy which allows the user to defend, monitor, and manage multiple projects at once.

October 28, 2024 - The Twistlock - Overview dashboard provides an at-a-glance overview of the state of your Kubernetes and container environments, including the number of hosts, containers, audit events, rules triggered, and defender incidents.

February 6, 2021 - For this tutorial, I am not going to deploy the Console into the Kubernetes cluster. Of course this is not a recommended way in a production environment because you would want the Console always available. The onebox installation method will install 2 containers, the Console and the Defender. The beauty about Twistlock architecture is you can deploy the Console anywhere, as long as the Defenders can reach the Console and you are good to go.

February 12, 2025 - $ export SERVICE_ACCOUNT_NAME=twistlock-service-account $ export CONTEXT=$(kubectl config current-context) $ export NAMESPACE=twistlock $ export NEW_CONTEXT=twistlock-context $ export KUBECONFIG_FILE="kubeconfig-sa" The variable TOKEN was already created in Part 2. ... This will generate a file in your local directory with the name of the variable KUBECONFIG_FILE. ... You can perform the auto-deployment of the DaemonSet defender via the Prisma Cloud Compute console UI, or via its API for automation purposes.

Twistlock Defender DaemonSet Helm Chart 33.02.134 · Prisma Cloud now supports scanning of Red Hat UBI micro-images (versions 7, 8, and 9). Vulnerability reports for OpenShift non-RPM container components now ensure consistent vulnerability matching across all OpenShift packages. This improvement reduces false positives by applying only relevant CVEs and excluding CVEs that have already been patched. Vulnerability detection for Google Kubernetes Engine (GKE) Clusters includes the following enhancements: Integration with Google security bulletins ·

Additionally, Twistlock's scalability is a significant factor; while it can handle large-scale deployments, managing multiple environments and ensuring high availability requires careful planning and resource allocation. The platform supports various deployment patterns, including Kubernetes, Amazon EKS, and OpenShift, and it includes automated backup and restore functionality to ensure data integrity.

December 5, 2024 - Defender: The agent deployed on hosts to enforce policies and provide runtime protection. Twistlock integrates with Kubernetes through admission controllers and native APIs to provide vulnerability scanning, compliance, and runtime protection ...

For Defenders deployed in the cluster where Console runs, specify Prisma Cloud Console’s service name, twistlock-console. For Defenders deployed outside the cluster, specify either Console’s external IP address, exposed by the LoadBalancer, or better, Console’s DNS name, which you must manually set up separately. The following command directs Defender to connect to Console using its service name. Use it for deploying a Defender DaemonSet inside a cluster. $ <PLATFORM>/twistcli defender export kubernetes \ --user <ADMIN_USER> \ --address https://yourconsole.example.com:8083 \ --cluster-address twistlock-console

October 22, 2019 - Note that the service name, twistlock-console, is not the same as the pod name, which is twistlock-console-XXXX. ... Defender is installed as a DaemonSet, which ensures that an instance of Defender runs on every node in the kubernetes cluster.

August 13, 2022 - https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/install/install_kubernetes ... This is not correct for windows nodes, you can’t run it as a daemonset on windows nodes as you can’t use privileged containers to access the host in windows nodes, it has to install on the host. ... Where do you see that? The linked instructions has specific parameters for PLATFORM=windows and the System Requirements also state it runs on AKS. ... The twistcli defender export command isn’t supported on windows or OS X based on the table in this link https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/tools/twistcli#. I’ve spent quite some time working on solutions for getting defender onto windows nodes and running it on the node is the only way I’ve been able to get it to work.

November 18, 2019 - apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: twistlock-role namespace: twistlock rules: - apiGroups: - extensions resourceNames: - privileged resources: - podsecuritypolicies verbs: - use · 2. Create the role in kubernetes kubectl apply -f twistlock_role.yaml

name: pcc-defender · namespace: twistlock · spec: namespace: twistlock · orchestrator: kubernetes · version: '21_08_520' defenderConfig: clusterAddress: twistlock-console · consoleAddress: https://twistlock-console:8083 ·