Create a Pairing Profile for Your Cluster Nodes
Important
Before deploying the C-VEN, ensure that either of the following two requirements has been met:
Kubelink is deployed on the Kubernetes cluster and is in sync with the PCE, or
Firewall coexistence is enabled.
Before deploying, you should create a pairing profile to pair the cluster nodes with the PCE. You only need to create one pairing profile for all your nodes.
Note
You only need to create pairing profiles for Kubernetes or OpenShift nodes and not for container workloads.
For ease of configuration and management, consider applying the same Application, Environment, and Location labels across all nodes of the same Kubernetes or OpenShift cluster. The screenshot below shows an example of a pairing profile for a Kubernetes cluster.
Tip
Illumio recommends all pairing profiles for Kubernetes nodes to not use Full Enforcement policy state. Use Idle or Visibility Only mode for initial configuration.
You should only move them into Full enforcement state after you have completed all other configuration steps in this guide.