Connect Confluence Data Center On-premises

This page describes how to create a Confluence Data Center data store and search app in Agentspace Enterprise, syncing on-premises Confluence data with Agentspace Enterprise.

After you set up your data source and import data the first time, you can choose how often the data store syncs with that source.

Before you begin

Before setting up your connection, do the following:

1. Verify that you have the Confluence Administrator permission to fetch the Access Control List (ACL) information.

2. Install the Permission Accessor for Confluence Data Center plugin. This plugin introduces REST endpoints that enable Google Agentspace to fetch space permissions, content restrictions, and licensed users' email addresses details to apply the correct permissions for the search experience in Google Agentspace.

3. Make sure that you have the following details:

   • Service attachment (required for private destination type only): Configure a service attachment for secure data transfer.
   • Username and password: Obtain valid credentials for authentication from your Confluence administrator.
   • Domain URL: For a private destination type, specify the URL of the Confluence Data Center instance.
   • Optional: Base domain name: Provide the base domain name for the Confluence instance.
   • Optional: Destination port: Identify the port used for communication with the Confluence Data Center.

4. Use the following configuration guidelines to establish connections with Private Service Connect (PSC). Adjust or add resources as needed. Make sure the PSC service attachment is properly configured to connect to the private instance and meets the requirements for a published service.

   1. Configure network settings:

      1. Place the PSC service attachment and load balancer in different subnets within the same Virtual Private Cloud network.

      2. The backend system must remain closed to the public network for security reasons. However, verify it can accept traffic from the following sources:

         • For proxy-based/HTTP(s) load balancers (L4 proxy ILB, L7 ILB), configure the backend to accept requests from the proxy subnet in the Virtual Private Cloud network.

         • For more information, see the Proxy-only subnets for Envoy-based load balancers documentation.

   2. Adjust firewall rules:

      1. Ingress rules:

         • Allow traffic from the PSC service attachment subnet to the internal load balancer (ILB) subnet.
         • Make sure that the ILB can send traffic to the backend.
         • Permit health check probes to reach the backend.

      2. Egress rules: Enable egress traffic by default, unless specific deny rules apply.

5. Additional considerations: Make sure to keep all the components, including the PSC service attachment and load balancer, in the same region.

Generate a service attachment

Use the following steps to generate a service attachment:

1. Decide endpoint type: Select Public or Private endpoint.

2. For Public endpoint: If the Confluence Data Center Destination type is Public, you are not required to create the setup for service attachment. Instead, you can use your public URL in the Domain URL field of the Google Cloud console when creating your connector.

3. For Private endpoint:

   1. Use Private Service Connect (PSC) to enable connections from private instances to Google Cloud.
   2. Create a Virtual Private Cloud network and required subnets.
   3. Create a Virtual Machine (VM) instance and install the backend service.
   4. Optional: Set up a health check probe to monitor backend health.
   5. Add a load balancer to route traffic to the VM or backend.
   6. Define firewall rules to allow traffic between the PSC endpoint and the backend.
   7. Publish the endpoint by creating a PSC service attachment.

Create a Confluence Data Center user and set up permissions

To enable Agentspace Enterprise to obtain data from Confluence, you need to create a new user and assign administrator permission to the user. This is because only Confluence administrators can view and manage permissions across all spaces.

1. Sign in as an administrator:

   1. Go to your Atlassian domain site and open the Confluence Data Center instance.
   2. Enter the administrator username and password.
   3. Click Log In.

2. Create a new user:

   When creating a data store, you must create a user to obtain data from the third-party instance.

   1. Click the settings icon.
   2. Select User management.
   3. Enter the administrator credentials, if prompted.
   4. In the Administration page, click Create user.
   5. Enter the email address, full name, username, and password.
   6. Click Create user.

3. Configure user permissions:

   1. In the Confluence administration page, navigate to the Users and security tab and click Groups.
   2. Search for the confluence-administrators group and add the newly created user to this group.

Create a Confluence Data Center On-premises connector

Next steps

• To attach your data store to an app, create an app and select your data store following the steps in Create a search app.

• To preview how your search results appear after your app and data store are set up, see Get search results. If you used third-party access control, see Preview results for apps with third-party access control.

• To enable alerts for the data store, see Configure alerts for third-party data stores.