Prisma Cloud Compute Container Defender- App Embedded Manually Installed Defenders not seeing

[F.Cetin]

• If you recreate  Dokcerfile from the twistlock console you must not change DEFENDER_TYPE env different from "appEmbedded". If you do that your twistlock-console gets defender type error. You can not see any defender host at Manage > Defenders > Defenders: Deployed 

Sample Dockerfile

# Use the official Python image from the Docker Hub

FROM python:3.9-slim

# Set the working directory in the container

WORKDIR /app

# Copy the server.py file into the container at /app

COPY . /app/

# Expose port 8888

EXPOSE 8888

# Run the server.py script

# Original ENTRTPOINT

#ENTRYPOINT ["python", "main.py"]

ADD twistlock_defender_app_embedded.tar.gz /defender_data

ENV DEFENDER_TYPE="appEmbedded"

ENV DEFENDER_APP_ID="MyWebApp"

ENV FILESYSTEM_MONITORING="true"

# log arg is not working in app-embedded defender

#ENV LOG_PROD="true"

#twistlock-console Cluster IP

ENV WS_ADDRESS="wss://<twistlock-console-dns-or-IP>:8084"

ENV DATA_FOLDER="/defender_data"

ENV INSTALL_BUNDLE="eyJzZ****"

ENV FIPS_ENABLED="false"

# Run the server.py new script

ENTRYPOINT ["/defender_data/defender", "app-embedded", "python", "main.py"]

• To resolve this issue you can use Prisma Cloud Compute API. 

curl -k -H 'Content-Type: application/json' -H "Authorization: Bearer eyJ****" -X GET https://<twistlock-console-dns-or-IP>:8083/api/v1/defenders

Response:

{"hostname":"MyWebApp:c18f6a1b-ddcd-5d33-fce5-036f87b73e83","version":"32.05.124","lastModified":"2024-09-19T12:26:08.499Z","type":"yourWrongDefenderTypeValue","category":"","connected":true

• Delete Defender from Prisma cloud Compute Console

curl -k -H 'Content-Type: application/json' -H "Authorization: Bearer eyJhb****" -X DELETE https://<twistlock-console-dns-or-IP>:8083/api/v1/defenders/MyWebApp:c18f6a1b-ddcd-5d33-fce5-036f87b73e83

•  And last stop and remove the container, image that has wrong ENV value and rebuild your app embedded container again.

Regards

Fahri