Set up a Private Remote Repository - Administrator Guide - 8 - Cortex XSOAR - Cortex

Set up a Private Remote Repository - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product

Cortex XSOAR

Version

Creation date

2024-02-14

Last date published

2024-04-25

New Development Tenant and New or Existing Production Tenant

In this scenario, the production tenant is first activated as a standalone (by default), and the private remote repository is then enabled in the production tenant. Once enabled, the first development tenant becomes the push tenant and the production tenant and any additional tenants become pull tenants.

Enable the private remote repository for the production tenant
In the production tenant, go to Settings & Info → Settings → Advanced → Content Repository and toggle the Content repository slider to enable the content repository.
When set to On, the sync direction is Pull.
In the Repository type field, select Private, and save the settings.
Define the Git settings using HTTPS or SSH.
Note
If your private Git remote repository uses personal access tokens instead of usernames and passwords, enter the access token in the password field and leave the username field blank.
For repository vendors that use tokens, the token type is entered in the username field and the token is entered in the password field. Verify details with your vendor.
If using an SSH key passphrase, only RSA private keys are supported. If your SSH connection uses a port other than port 22 (the default SSH port), you must include the SSH string and port number in the Repository URL field. In the following example, we use port 20017:
ssh://git@content.demisto.com:20017/~/my-project.git
Select the active branch on which you will be working.
(Optional) In the Advanced section, you can add any engines you want to connect.

In the Cortex Gateway , locate the Cortex XSOAR production tenant where you enabled the private repository in Step 1.
Hover over the Cortex XSOAR tenant and click Activate Dev Tenant.

Define the following fields:

Name	Details
DEV TENANT NAME	Give the Cortex XSOAR dev tenant an easily recognizable name. Choose a name that is 59 or fewer characters and is unique across your company account.
REGION	Select the region in which you want to set up the Cortex XSOAR dev tenant.
DEV TENANT SUBDOMAIN	Give your Cortex XSOAR dev instance an easy to recognize name that is used to access the tenant directly using the full URL (`https://<subdomain>xsoar.<region>.paloaltonetworks.com`).

Select ENABLE CONTENT REPOSITORY.
Accept the terms and conditions and activate the tenant.

Activate any additional development tenants by repeating Step 2.
Enable the private remote repository in the development tenants
The first development tenant automatically becomes the push tenant. See Remote Repository Management for more information.
In the development tenant, go to Settings & Info → Settings → Advanced → Content Repository and toggle the Content repository slider to enable the content repository.
When set to On, the sync direction for the first development tenant is Push. The sync direction for any additional development tenants is Pull.
In the Repository type field, select Private.
Define the GitHub settings using HTTPS or SSH.
Note
If your private Git remote repository uses personal access tokens instead of usernames and passwords, enter the access token in the password field and leave the username field blank.
For repository vendors that use tokens, the token type is entered in the username field and the token is entered in the password field. Verify details with your vendor.
If using an SSH key passphrase, only RSA private keys are supported. If your SSH connection uses a port other than port 22 (the default SSH port), you must include the SSH string and port number in the Repository URL field. In the following example, we use port 20017:
ssh://git@content.demisto.com:20017/~/my-project.git
Select the active branch on which you will be working.
You can either use the same branch as for the pull tenant (production or additional development tenant), or a different branch. If using a different branch, you need to define a manual or automatic merge between branches which is done outside Cortex XSOAR.
(Optional) In the Advanced section, you can add any engines you want to connect.
Save the settings.
After completion, the production and development tenants are now synced. You are now ready to start creating and testing content on the development tenant that you can push to production tenant when ready.
Enable the private remote repository in each additional development tenant by repeating Step 4. They will automatically be set to pull.

Existing Development and Production Tenants

In this scenario, the production and development tenants were managed in parallel with different sets of content. Since they were already activated in Cortex Gateway, their content repository settings can only be changed within the tenants.

Note

The first tenant that is enabled pushes its content to the remote repository first. For example, these instructions describe enabling the production tenant first, so the remote repository will initially contain production tenant content. You can enable a development tenant first if you want the remote repository to initially contain the content from the development tenant.

Enable the private remote repository in the production tenant
In the production tenant, go to Settings & Info → Settings → Advanced → Content Repository and toggle the Content repository slider to enable the content repository.
When set to On, the sync direction is Pull.
In the Repository type field, select Private, and save the settings.
Define the GitHub settings using HTTPS or SSH.
Note
If your private Git remote repository uses personal access tokens instead of usernames and passwords, enter the access token in the password field and leave the username field blank.
For repository vendors that use tokens, the token type is entered in the username field and the token is entered in the password field. Verify details with your vendor.
If using an SSH key passphrase, only RSA private keys are supported. If your SSH connection uses a port other than port 22 (the default SSH port), you must include the SSH string and port number in the Repository URL field. In the following example, we use port 20017:
ssh://git@content.demisto.com:20017/~/my-project.git
Select the active branch on which you will be working.
(Optional) In the Advanced section, you can add any engines you want to connect.
Save the settings.
Enable the private remote repository in the development tenants
Once enabled, the first development tenant automatically becomes the push tenant. See Remote Repository Management for more information.
In the development tenant, go to Settings & Info → Settings → Advanced → Content Repository and toggle the Content repository slider to enable the content repository.
When set to On, the sync direction for the first development tenant is Push. The sync direction for any additional development tenants is Pull.
In the Repository type field, select Private.
Define the GitHub settings using HTTPS or SSH.
Note
If your private Git remote repository uses personal access tokens instead of usernames and passwords, enter the access token in the password field and leave the username field blank.
For repository vendors that use tokens, the token type is entered in the username field and the token is entered in the password field. Verify details with your vendor.
If using an SSH key passphrase, only RSA private keys are supported. If your SSH connection uses a port other than port 22 (the default SSH port), you must include the SSH string and port number in the Repository URL field. In the following example, we use port 20017:
ssh://git@content.demisto.com:20017/~/my-project.git
Select the active branch on which you will be working.
(Optional) In the Advanced section, you can add any engines you want to connect.
Select which content to keep and which to overwrite. If there are any discrepancies between the development tenant and remote repository (which in this example initially contains the production tenant content after it is enabled), the Specified repository is not empty window opens. Options are:
Existing content on your tenant: Keeps the existing content on your tenant and replaces the content on the specified repository. Cortex XSOAR checks if any other tenants are using the remote repository. If yes, this option is disabled. In this example, the remote repository was already enabled in the production tenant, so the remote repository holds production content. If you want to keep the content on the development tenant:
Disable the remote repository in any additional enabled tenants. In this case, for the first development tenant, only the production tenant must be disabled.
Select Existing content on your tenant for this tenant.
Complete synchronization.
Re-enable the remote repository in any additional tenants and select Existing content on the specified repository in each additional tenant.
Existing content on the specified repository: Deletes the existing content on your tenant and replaces it with content from the specified repository.
Click Continue.
After completion, all tenants are now synced. You can start creating and testing content on the development tenant that you can push to production and additional development tenants when ready.