Profiles Engine FAQ

Q: Is this component available or currently running on my cluster?

A: If you have recently created a cluster using PKM 5.3.0+, the option to implement this was available. Clusters created before this version did not have it listed as an option, as a cluster must be running the Profile Engine Agent.

Q: Can I add the Profile Engine Agent to an existing cluster?

A: Yes, but it will cause a temporary cluster interruption. Version 5.4 will include the agent in the Add-on Manager.

Q: When I deploy a profile, what happens to pre-existing policies on the cluster?

A: Existing policies will have any missing verbs or bindings added. Nothing will be removed. Future releases will include the ability to add and remove verbs/bindings from existing policies.

Q: Does this work on all clusters, including EKS, AKS, and GKE?

A: No. Version 5.5 will introduce support for Add-on Manager and Profile Engine.

Q: How do Cluster Profiles differ from RBAC Settings?

A: Cluster Profiles allows users to create a profile image then edit, deploy, and archive those profiles as a template within the management plane. The RBAC settings enable users to create and edit individual Roles, ClusterRoles, RoleBindings, and ClusterRoleBindings in the dashboard.