Sign inSign up

checkpoint/infinity-next-kong

By checkpoint

Updated 16 days ago

Kong API Server plus a module for using Check Point Nano-Agent with CloudGuard AppSec.

Image
0

3.2K

checkpoint/infinity-next-kong repository overview

To Install a Kong API Server with Check Point Nano-Agent as a container:

  1. Add the agent container image to the deployment CI's applicable container management system.
  2. As part of your CI, use the following registry to pull the Nano-Agent image:
    <a href=https://hub.docker.com/r/checkpoint/infinity-next-nano-agent>checkpoint/infinity-next-nano-agent
  3. Navigate to <a href=https://portal.checkpoint.com>Infinity Portal > Policy Application, browse to the Cloud > Profiles page. Obtain the agent token from your profile object.
  4. Run the agent with this command (–e https_proxy parameter is optional):
    docker run -d --name=agent-container --ipc=host -v=<path to persistent location for agent config>:/etc/cp/conf -v=<path to persistent location for agent data files>:/etc/cp/data -v=<path to persistent location for agent debugs and logs>:/var/log/nano_agent –e https_proxy=<user:password@Proxy address:port> -it <agent-image> /cp-nano-agent --token <token>
  5. Create or replace the Kong container using this registry to pull the Kong image for this deployment.
  6. Change the Kong docker \run command, add the --ipc=host parameter.
  7. Run the execution commands for the two containers and make sure that it is running, use docker ps.
  8. Navigate to the Infinity Portal > Enforcement > go to the Agents page and make sure that the new Agent is added.

Tag summary

Content type

Image

Digest

sha256:a05b7c1b0

Size

45.1 MB

Last updated

about 2 months ago

docker pull checkpoint/infinity-next-kong