Skip to main content

Allowlist Harness Platform IPs and CIDR

Harness supports allowlisting of its SaaS infrastructure IPs to enable secure access to private networks. This is helpful when you want to connect Harness to internal systems such as Kubernetes clusters, artifact repositories, SCMs, or other internal services.

We recommend contacting Harness Support to receive the correct list of IPs and guidance based on your use case, region, and Harness modules in use.

Outbound Access Requirements​

Harness Delegates typically only require outbound access to the following domains:

  • app.harness.io is the Primary Harness platform endpoint. You may need to include one additional endpoint depending on the cluster for your account. You can verify this by going to your Account Settings -> Account Details, in the Harness Cluster field.

    ClusterURL Format
    Prod1app.harness.io
    Prod2app.harness.io
    Prod3app3.harness.io
    Prod0/Prod4accounts.harness.io
    EU clustersaccounts.eu.harness.io

  • logging.googleapis.com – (Optional) Used to send logs to Harness Support. This can be disabled using the STACK_DRIVER_LOGGING_ENABLED environment variable. Learn more.

Allowlisting Harness IPs​

To connect securely from Harness to your internal infrastructure — such as for:

  • Pipeline execution using Harness Cloud

  • Deployments via GitOps agents

  • Feature Flags / Feature Management & Experimentation . Customers may also want to consider setting up a Feature Flag Proxy.

  • Hosted builds (Linux/macOS)

  • Internal APIs or SCM access

You may need to allowlist specific IP ranges based on the Harness services you're using.

Sign up for access to the Harness Security Trust Center​

Customers can access the IP allowlist by signing up to an account on our trust.harness.io website.

  1. Go to the Harness Security Trust Center.
  2. Click on Get Access in the upper right corner to set up a sign in
  3. Enter your email address and click continue. Agree to the NDA.
  4. An email will be sent to your email address with sign-in instructions

Locating the IP Allowlist​

The IP allowlist is located in the Product Security section of the Trust Center. Harness provides region- and service-specific IPs for allowlisting. These are not publicly listed to avoid misuse.

  1. Click on the Product Security section
  2. Search for the Harness IPs document
note

If after signing up for an account on trust.harness.io you do not see the IP Allowlist, please reach out to Harness Support and we will be glad to provide the correct security for access.

Keeping Updated on changes to the IP Documentation​

Harness provides a method to subscribe to all updates in the Harness Trust Center.

  1. Click on the Notification Bell on the right side of the website
  2. Subscribe to updates for the Harness Security Trust Center by adding your email and clicking Subscribe

Configure clusters​

To ensure proper functionality, configure your clusters with API access to the authorized Harness IP addresses.

If you have not yet configured your clusters with the required IP addresses, use the links provided below to complete the configuration for the listed clusters.