twistcli app-embedded embed command format for EKS containers on Fargate?

[TommyHunt]

Most of my API and twistcli commands work but I cannot get an app-embedded defender to be returned…. I have tried these two commands returns the same error…

declare -x PRISMA_CLOUD_COMPUTE_CONSOLE_API_ADDR="https://us-east1.cloud.twistlock.com/us-1-XXXXXXXX"

declare -x PRISMA_CLOUD_COMPUTE_SVC_ADDR="us-east1.cloud.twistlock.com"

declare -x PRISMA_CONSOLE="https://us-east1.cloud.twistlock.com/us-1-XXXXXXXX"

$ twistcli app-embedded embed --app-id app-id1230 --data-folder /tmp --output-file defender.zip --console-host ${PRISMA_CLOUD_COMPUTE_CONSOLE_API_ADDR}   --user ${PRISMA_ADMIN_USER}   --password ${PRISMA_SECRET} Dockerfile

Get "https://127.0.0.1:8083/api/v22.06/authenticate/identity-redirect-url?type=prismaCloud": dial tcp 127.0.0.1:8083: connect: connection refused

I checked the versions and they match…

$ curl -k   -H "Authorization: Bearer $token"   -H 'Content-Type: application/json'   -X GET   ${PRISMA_CONSOLE}/api/v1/version

"22.06.228"

$ twistcli --version

twistcli version 22.06.228

I can ping and authenticate with the compute console SUCCESSfully…

$ curl -k -s -o /dev/null -w "%{http_code}\n" -X GET https://us-east1.cloud.twistlock.com/us-1-XXXXXXXX/api/v1/_ping

200

$ curl -k \

> -H "Content-Type: application/json" \

> -X POST \

> -d \

> "{

>  \"username\":\"${PRISMA_KEY_ID}\",

>  \"password\":\"${PRISMA_SECRET}\"

> }" \

> ${PRISMA_CONSOLE}/api/v1/authenticate

{"token":"..secret"}

Can you reply with the command to generate app embedded defender zip file given a Dockerfile?

[TommyHunt · Accepted solution]

So...

"twistcli app-embedded embed" requires both --address and --console-host parameters.

declare -x PRISMA_CLOUD_COMPUTE_CONSOLE_API_ADDR="https://us-east1.cloud.twistlock.com/us-1-XXXXXXXX"
declare -x PRISMA_CLOUD_COMPUTE_SVC_ADDR="us-east1.cloud.twistlock.com"

twistcli app-embedded embed \
--address ${PRISMA_CLOUD_COMPUTE_CONSOLE_API_ADDR} \
--app-id APP-2781-simple-eks-task \
--console-host ${PRISMA_CLOUD_COMPUTE_SVC_ADDR} \
--data-folder "/tmp" \
--output-file embedded_defender.zip \
--user $PRISMA_KEY_ID -p $PRISMA_SECRET Dockerfile