topic Re: prisma cloud integrate with jenkins server in Prisma Cloud Discussions

prisma cloud integrate with jenkins server

B.Suriya — Thu, 17 Oct 2024 07:25:55 GMT

connect the Jenkins server:
From the documentation
https://docs.prismacloud.io/en/enterprise-edition/content-collections/application-security/get-start...
In the step:2 what should i do
my Jenkins integration are in pending state

Re: prisma cloud integrate with jenkins server

SNimmagadda — Thu, 17 Oct 2024 12:58:31 GMT

@B.Suriya Thanks for reaching out.

The integration is added in the UI but integration is pending only and will only be completed after completing step 3 below.

You can retrieve your Jenkins instance identifier by accessing the integrated Jenkins Server (see step 1 above) > selecting the Actions menu of an integration in the wizard > Copy instance identifier.

So, Please go-ahead and Complete remaining steps.

https://docs.prismacloud.io/en/enterprise-edition/content-collections/application-security/get-started/connect-code-and-build-providers/ci-cd-systems/add-jenkins-cicd-system

Re: prisma cloud integrate with jenkins server

B.Suriya — Fri, 18 Oct 2024 04:51:44 GMT

i have followed a offical documentation in the
step:1
1. created a service account
2. what to do in the allow list ?
I have completed a step 3

Plugin setup are done in the Jenkins server, but still is in pending state.
is there is any additional network configuration need to do?

Re: prisma cloud integrate with jenkins server

SNimmagadda — Fri, 18 Oct 2024 16:55:33 GMT

@B.Suriya

Add the Prisma Cloud IP addresses and hostname for Application Security to an allow list to enable access to the Prisma Cloud Console. This is Part of Step1, number:2
In Jenkins.
1. If your Jenkins server has limited outgoing connections, make sure to permit an outgoing connection from the Jenkins server to Prisma IP addresses - see step 1 above.

Re: prisma cloud integrate with jenkins server

B.Suriya — Sat, 19 Oct 2024 04:53:03 GMT

Add the Prisma Cloud IP addresses and hostname for Application Security to an allow list to enable access to the Prisma Cloud Console. This is Part of Step1, number:2
where to do these changes i cannot able to find a allow list in the Prisma console, can you explain it in detail.
In Jenkins: its allow for all.

Re: prisma cloud integrate with jenkins server

SNimmagadda — Mon, 21 Oct 2024 19:16:13 GMT

@B.Suriya If you are on app.prismacloud.io stack. Please add the related IPs . Plugin is doing a POST request to api.prismacloud.io with metadata. Jenkins server should be able to resolve and reach api.prismacloud.io. The IPs should be generally allowed on the firewall if you are using Prisma Cloud Enterprise edition.

Note: if you are on app2 api would be api2.prismacloud.io. So, please change the url according to the stack(app,app2,app3,app4 and app5)

Re: prisma cloud integrate with jenkins server

B.Suriya — Tue, 22 Oct 2024 06:36:34 GMT

able to find the IPs for particular region and done a allow rule in the Jenkins server,
my doubt:
1. Having a IPs for that region of app.prismacloud.io from document.
2. Where to configure those region IPs.

Re: prisma cloud integrate with jenkins server

SNimmagadda — Tue, 22 Oct 2024 15:30:48 GMT

@B.Suriya

To add these IP addresses to an allow list, you may need to work with your network security team. The configuration for where you set up the allow list is dependent on your network architecture and it could be your firewall, proxy, or the server itself.

The Prisma Cloud URL indicates the region where your tenant is deployed. For example, your tenant is on app3 if your URL is https://app3.prismacloud.io/.
On the Runtime Security > Manage > System > Utilities, find the region in the URL for Path to Console. Use that region to identify the destination IP address, which you must allow or add as trusted to access the Prisma Cloud Compute console. For example, if the URL is https://us-west1.cloud.twistlock.com/us-xxxxxx, us-west1 indicates your Compute console region.

Use the table to review the IP addresses to allow: Egress-From Defenders to Console; Ingress-From Console in to your environment.

Re: prisma cloud integrate with jenkins server

B.Suriya — Tue, 22 Oct 2024 16:39:47 GMT

Follow the documentation for integration.

1. How to configure these ip

2. Where can i find ip in my prisma cloud Console...

Re: prisma cloud integrate with jenkins server

SNimmagadda — Tue, 22 Oct 2024 19:35:13 GMT

@B.Suriya 1.To add these IP addresses to an allow list, you may need to work with your network security team. The configuration for where you set up the allow list is dependent on your network architecture and it could be your firewall, proxy, or the server itself. If your instances are on Cloud service providers. please add those IPs to your firewall.

Detailed documentation is here https://docs.prismacloud.io/en/enterprise-edition/content-collections/get-started/console-prerequisites#idcb6d3cd4-d1bf-450a-b0ec-41c23a4d4280

2. Those IPs will not be in Prisma console. If your console is on App.prismacloud.io. Please add those IPs to your firewall.

Re: prisma cloud integrate with jenkins server

B.Suriya — Wed, 23 Oct 2024 10:36:15 GMT

1. It in allow all condition,
2. Stuck with the point point 2 allow list, where add those IPs..

Re: prisma cloud integrate with jenkins server

SNimmagadda — Wed, 23 Oct 2024 13:57:50 GMT

@B.Suriya

Allow list is dependent on your network architecture and it could be your firewall, proxy, or the server itself. If your instances are on Cloud service providers. please add those IPs to your firewall. As Mentioned, Please discuss with your network team to add those IPs to your CSPs or On-premises depends on your environment.

Re: prisma cloud integrate with jenkins server

B.Suriya — Thu, 24 Oct 2024 16:10:14 GMT

My Jenkins server are allow all IPs, no proxy, no any additional configuration.

Problem: Integration is in pending state
Followed a prisma cloud documentation for integration, stuck in allow list
Add the prisma cloud ip address and hostname for application security to an allow list to enable the access to prisma cloud console.
Where to find allow list settings

Doubt

Need to do any configuration in network Tunnel