topic Re: Europe dome9 api endpoint not resolvable in DevSecOps

Europe dome9 api endpoint not resolvable

pleunwillemsen — Sat, 20 Feb 2021 08:26:11 GMT

shiftleft code-scan -s C:\repos\project1
INFO [20-02-2021 07:33:23.966] ShiftLeft Code-Scan Blade Scan Started!
ERROR [20-02-2021 07:34:27.200] failed initializing communication: request timeout after 6 retries got err: Post https://api.eu.dome9.com/v2/auth/assume-role/jwt: dial tcp: lookup api.eu.dome9.com: no such host

Below the environment variables

Environment variable name	value
CHKP_CLOUDGUARD_ID	'GUID'
CHKP_CLOUDGUARD_SECRET	'secret'
SHIFTLEFT_REGION	'EU'

Windows executables in both versions (x86 and x64)

shiftleft --version
0.0.29

Documentation: https://sc1.checkpoint.com/documents/CloudGuard_Dome9/Documentation/Shift-Left/Installing-shiftleft.htm?stocpath=ShiftLeft%7C_____1# -> 'Installing ShiftLeft on Windows'

Re: Europe dome9 api endpoint not resolvable

StuartGreen — Mon, 22 Feb 2021 09:56:54 GMT

Can you try setting the value of SHIFTLEFT_REGION to 'EU1' ?

Re: Europe dome9 api endpoint not resolvable

pleunwillemsen — Mon, 22 Feb 2021 16:35:40 GMT

No luck

#switch to EU1

Set-Item Env:\SHIFTLEFT_REGION -Value 'EU1'
shiftleft code-scan -s C:\repos\project1
INFO [22-02-2021 17:30:47.793] ShiftLeft Code-Scan Blade Scan Started!
ERROR [22-02-2021 17:30:48.048] failed initializing communication: cannot login to Check Point authentication service (respone 401), please verify your key

#Switch back to EU

Set-Item Env:\SHIFTLEFT_REGION -Value 'EU'
shiftleft code-scan -s C:\repos\project1
INFO [22-02-2021 17:31:01.268] ShiftLeft Code-Scan Blade Scan Started!

INFO [22-02-2021 17:31:11.729] failed initializing communication: request timeout after 6 retries got err: Post https://api.eu.dome9.com/v2/auth/assume-role/jwt: dial tcp: lookup api.eu.dome9.com: no such host

Re: Europe dome9 api endpoint not resolvable

StuartGreen — Mon, 22 Feb 2021 16:38:28 GMT

I think that's addressed the first issue because it's using the right host - but looks like your key is invalid. Did you generate the key from an EU tenant (ones from the US default tenant aren't valid in EU).

Re: Europe dome9 api endpoint not resolvable

pleunwillemsen — Mon, 22 Feb 2021 19:20:37 GMT

Hmm, very strange i'm regenerating a new token; updating my environment variables with the new ID and Secret and the region on EU1.

It runs successfully. 🙄

Anyhow thanks for your time.