๐Pynt as a Standalone Container
Run Pynt as a standalone container without the CLI for isolated and scalable API security testing. Ensure consistent and efficient protection across your development environments.
๐ At a Glance: Pyntโs standalone container mode allows you to run the Pynt container without the CLI, making it ideal for systems like Kubernetes or container orchestration platforms. In this mode, you control Pynt through its APIs and route HTTP traffic through the container for security testing.
Standalone container mode
Pynt container can run without the CLI, facilitating its use in various deployment scenarios beyond traditional Docker-based environments. This mode is particularly useful for systems leveraging Kubernetes or similar container orchestration platforms.
This mode is based on Pynt command, but here the user is required to run the Pynt container, control it through APIs, and route the http traffic through the container.
There are two step needed for this integration:
Run the Pynt Container: This involves setting up and running the Pynt container. Pynt can operate as a stand-alone server, as long as it setup correctly.
Control via APIs & Route HTTP Traffic: After deploying the Pynt container, you will need to manage it through its APIs. Additionally, route your HTTP traffic through the container to have Pynt scan the traffic.
How to run the Pynt container
Image:
ghcr.io/pynt-io/pynt:proxy-latest
ports:
6666
- Pynt proxy port5001
- port for API commands to Pynt server
Environment variables:
PYNT_SAAS_URL="
https://api.pynt.io/v1
"
- Pynt platform URLPYNT_ID='$PYNT_ID' -
Pynt credentials, how to get it
Here is an example of running Pynt server using docker:
How to control Pynt container
Once the Pynt container is running in your environment, run the Pynt scan by the following three steps:
To activate the Pynt proxy, make a call to the
/api/proxy/start
endpoint. Once activated, Pynt will listen on port 6666 for incoming traffic. For example, you can use curl as follows:Run your functional tests through the Pynt proxy. Pynt will read and analyze the traffic. For example, using Python Pytest:
To start a Pynt scan, you need to call the
/api/proxy/stop
endpoint, providing thescan_id
in the message body. For example, you can use the followingcurl
command:Optionally, you can pass the Application ID and Test Name for improved management of this scan in the Pynt platform. For example:
To retrieve the report, send repeated requests (poll) to the endpoint
/api/report
, including the scan ID as a query parameter. A status code of202
indicates the scan is still running, while a200
status code signifies that the scan is complete and the HTML report is included in the response body. For example:
Example: Pynt with Kubernetes
๐ก Still Need Help? For any questions or troubleshooting, reach out to the Pynt Community Support.
Last updated