Home - PaloAltoNetworks/cn-series-deploy GitHub Wiki

Welcome to the cn-series-deploy documentation wiki!

This repository contains Terraform plans to assist with the deployment of a Kubernetes cluster in GKE, EKS, or AKS that meets the minimum requirements for hosting a CN-Series Firewall. It provides a CN-Series deployment plan and a sample PHP guestbook application that can be protected.

Let's get started!

  1. First, let's review the Requirements
  2. Next, let's deploy our GKE, EKS, or AKS cluster.
  3. Once the cluster is deployed and we have our credentials, we can deploy the CN-Series Firewall.
  4. With the firewall deployed, we are now able to extract the credentials for the plugin service account and configure the Kubernetes plugin.
  5. Lastly, let's deploy a sample application to our cluster and use the CN-Series Firewall to protect it.