Which ip address I need to allowlist in my firewall to get ssh fingerprint?

[Tuomas Viskari]

I'm adding ssh keys to my repository pipeline settings.

I have successfully added public and private keys, but when I'm trying to get a fingerprint, I get following error:

Unable to fetch fingerprints, check host SSH connection and try again

I believe that it must be misconfigured firewall. I have whitelisted Valid IP addresses for Bitbucket Pipelines build environments from https://support.atlassian.com/bitbucket-cloud/docs/what-are-the-bitbucket-cloud-ip-addresses-i-should-use-to-configure-my-corporate-firewall/

Am I supposed to whitelist also: Valid IP addresses for bitbucket.org, api.bitbucket.org, and altssh.bitbucket.org?

Or perhaps some other ip address?

Br,

Tuomas Viskari

[Theodora Boudale]

Hi @Tuomas Viskari and welcome to the community!

You will need to whitelist both

Valid IP addresses for bitbucket.org, api.bitbucket.org, and altssh.bitbucket.org

and also

Valid IP addresses for Bitbucket Pipelines build environments

listed on that page, so you can fetch the fingerprint.

Please feel free to let me know how it goes and if you need anything further.

Kind regards,
Theodora

[Budggy Inc_]

Hi @Theodora Boudale - which inbound rule type does the FETCH needs? SSH or HTTPS? Also, for those:

1) Valid IP addresses for bitbucket.org, api.bitbucket.org, and altssh.bitbucket.org

2) Valid IP addresses for Bitbucket Pipelines build environments

Which type also?

Thank you

[Theodora Boudale]

Hi @Budggy Inc_,

If we are talking about fetching your server's fingerprints in the Known hosts of a Bitbucket repository, then I believe SSH is enough. When you try to fetch the fingerprint, Bitbucket runs an ssh keyscan in order to fetch it.

I see that you posted another question related to IP whitelisting. I am going to reply to this new question of your shortly and you can then reply over there if you need more help.

Kind regards,
Theodora