How to properly configure proxy settings in Bamboo

Question

I'm trying to setup the proxy settings in bamboo so that i can add a linked repository via Bitbucket Cloud.

(Side note: my bamboo installation is running as a docker image)

I have been trying to set the proxy settings in the JVM_SUPPORT_RECOMMENDED_ARGS variable in the bin/setenv.sh file:
e.g.
-Dhttps.proxyHost=
-Dhttps.proxyPort=
-Dhttps.proxyUser=
-Dhttps.proxyPassword=
-Dhttps.nonProxyHosts=

When Bamboo starts up i can look at the "Environment Variables", i can see the JAVA_OPTS variable populated with the relevant proxy values.

Yet, as soon as i try to add a linked repository it fails with some sort of proxy error.
Trying various configurations i either get one of these errors:

1.) "Failed to load data from Bitbucket. com.atlassian.bamboo.plugins.bitbucket.api.BitbucketApiException: HTTP 407"

"The following error was encountered while trying to retrieve the URL: https://api.bitbucket.org/*

Cache Access Denied.

Sorry, you are not currently allowed to request https://api.bitbucket.org/* from this cache until you have authenticated yourself."

2.) "Failed to load data from Bitbucket. [502 Proxy Error]" on the frontend accompanied by the following in the logs:

[DefaultHttpClient] I/O exception (java.net.SocketException) caught when connecting to {s}->https://api.bitbucket.org:443: Network is unreachable (connect failed)

I have also configured the proxy on the environment itself and am able to connect to the Bitbucket Cloud repository using curl and make a successful call, but i can't seem to get the poxy settings to work in the JVM for Bamboo.

Any insight would be appreciated.

DanaC · Answer

I had better luck setting the http.proxy* settings in the BAMBOO_INSTALL_DIR/conf/catalina.properties, and of course only clone with HTTPS, since most web proxies like squid only do http/https by default on not ssh.
As a last resort I had also used a build (agent with http_proxy environment variables set to the clone from Bitbucket cloud and then push to a locate git repo in my on premise (behind firewall) instance of Bitbucket server, the a second build in bamboo that would get triggered from that commit.
So it works, not exactly the most direct route but we had similar issues with getting in and out of our proxy.

Personally I am not a fan of the use of a -D option when it involves a password, but it will show up in a ‘ps -ef’ so I always used the catalina.properties.

Dewald Batt · Answer

Our company uses Squid, a caching and forwarding web proxy, so in our case it is necessary to configure our application servers with proxy details in order to access anything external on the web (unless we go through the laborious process of requesting firewall access)

While we've been able to configure the proxy settings on a system level and are able to connect to Bitbucket Cloud via curl/wget on the command line, Bamboo does not seem to use these system settings.

We then resorted to adding those parameters (proxy host/port/user/password) to the JVM. I did actually refer to that link you provided, but note that it's specifically a JIRA article. I made the assumption that the same would apply for Bamboo, but it does not seem to be the case.

So because our proxy responds with "Sorry, you are not currently allowed to request https://api.bitbucket.org/* from this cache until you have authenticated yourself." we came to the conclusion that the proxy might not be receiving the username/password from Bamboo.

And this was further supported by the open/unresolved bug we found (BAM-14775) where it says that the arguments "http.proxyUser" and "http.proxyPassword" are not currently supported.

somethingblue · Answer

Hi Dewald,

Let me clarify a couple things:

1.  It's not necessary to set up a forward proxy to be able to connect to Bitbucket Cloud unless you really need to
2.  It looks like you have a reverse proxy sitting in front of Bamboo

If Bamboo is sitting behind a FORWARD proxy to communicate to the Internet, you should be able to add those parameters to the JVM arguments.  This is also mentioned in

How to Configure an Outbound HTTP and HTTPS Proxy for JIRA applications.

If you have a REVERSE proxy sitting in front of Bamboo, you must configure the Tomcat Connector as described in Integrating Bamboo with Apache HTTP server and adjust the server.xml file and add the following parameters to the Connector on port 8085:

scheme="http"
proxyName="mycompany.com" 
proxyPort="80"

Cheers,

Branden