让 Jenkins 访问 VPN 背后的 AWS 实例

Question

I need to trigger a Jenkins build that will access a Chef server installed on an EC2 instance which is behind a VPN.

Potentially the security group could be relaxed to allow the Jenkins server's IP, but I hope to avoid that.

Is there a way to connect Jenkins to a VPN while executing a build?

A Google search of this yielded this plugin on github but in its Jenkins page there's no real information nor is it downloadable.

Answer 1

一种方法是让安全可靠的堡垒服务器充当VPC的接口，并仅允许您允许的请求访问隧道（使用SSH，VPN或其他方式）。

Answer 2

You should create a NAT gateway in the account where Jenkins is installed. NAT Gateway will have Elastic IP and all the resources in this VPC (including Jenkins) will reach to Internet using this EIP. Then you configure your target security group to allow connections from this Elastic IP.

Answer 3

create OpenVPN ec2 instance from aws marketplace and create ec2 instance for ur jenkin and add the security group of ur openvpn instance to jenkin instance .. so that once u connect your openvpn then only u access ur jenkin instance...

Note: Openvpn instance is not free of cost