Skip to main content

Allowlist Harness Domains and IPs

Harness SaaS Delegates only need outbound access to the Harness domain name (most commonly, app.harness.io) and, optionally, to logging.googleapis.com (used to provide logs to Harness support).

The logging.googleapis.com URL is used to send logs to Harness support. You can disable this functionality by using the delegate STACK_DRIVER_LOGGING_ENABLED environment variable. For more information, go to Delegate environment variables.

Harness Manager

Users of the Harness Manager browser client need access to app.harness.io and static.harness.io. This is not a Harness Delegate requirement. It's simply for users to use the browser-based Harness Manager.

Vanity URL

If you are using a Harness vanity URL, like mycompany.harness.io, you can allowlist it also.

Allowlist Harness SaaS IPs

The following list is optional. You can allowlist these IPs if needed.

35.201.91.229
34.120.225.85
34.110.203.189
34.149.33.161
34.160.153.7

Harness will not change IPs without 30 days notice to all customers. If a security emergency requires a change, all customers will be notified.