Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Stop Jira DVCS connecion scanning all repos in Github

BBC Application Admin Team March 13, 2019

I can successfully link Jira and our Github org however, there are many repos in the org which Jira then goes to scan. The problem with this is a risk of timeout /github rate limit breach/ unresponsive Jira.

What is the best way to only create a connection between jira and specific repos

1 answer

0 votes
Andy Heinzer
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 18, 2019

When using the DVCS to connect Jira to a repo like github, there are steps where you have to create an authorization token.   Please see: Linking a Bitbucket or GitHub repository with Jira

The authorizing account is not necessarily the account that created the key and secret. The authorizing account should have administrative access on all the repositories to be linked. 

So in theory, if you could create a new user account in github, and gave that specific account only admin level access to the specific repos you wanted to sync (not all your repos), you could then use that account when setting up the DVCS in Jira.  This way Jira would only be able to sync repos that specific user account has access to.  I don't believe Jira has any other way to limit this kind of access.  I have to admit, I'm not sure how difficult it would be to create a new user account and grant those admin rights in github, but you can do that, it looks like it's an approach that could work to limit what syncing happens.

BBC Application Admin Team March 29, 2019

@Andy Heinzerthanks for your suggestion. Sadly, this does not work.

I've created a Github user which owns 2 repos (created via this user) and is added as a admin on 3 other repos (owned by someone else).

Jira DVCS account information will only show the 2 repos owned by that user, not the ones its an admin for.

Andy Heinzer
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
April 1, 2019

Which account created the key and secret?

And which account is the authorizing account?

These are not necessarily going to be the same account in all cases.  In your case, I believe that the key and secret could be created by the owner, but the authorizing account would be the other admin account here.  In this setup, this should work to allow Jira to sync only the repos that admin account has access to and not other repos that authorizing account does not have access to.

I would recommend trying to remove the current DVCS settings and try to set this up as such again. If you find this is not the expected behavior here, please let me know.  It might be better to create a support request where we can gather some potentially more sensitive data from your in a private channel to better understand what is happening here.

Andy

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events