Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
4,364,443
Community Members
 
Community Events
168
Community Groups

Xpack Security for Bitbucket Data Center

Hi,

As per atlassian documentation, when elastic search is set up for code search in bitbucket data centre, it is recommended that xpack security be disabled.

https://confluence.atlassian.com/bitbucketserver066/how-to-install-and-configure-a-remote-elasticsearch-instance-978198477.html

However, we would like to know if there is any alternate solution for this? How are the other customers securing elastic search and making it work with bitbucket data centre i.e by not using the xpack security?

Thanks

Ram

1 comment

Hi! How are you doing?

Atlassian provides a free plugin called Buckler for this purpose.

You have got to pay attention that it requires Elastic 6.6.1 (we have tried to install it on 6.6.2 and it did not work).

Hope this helps!

Like Ramprasad Baliga likes this

Hi Cristiano!

Thanks for the reply! However the password in buckler.yml is not encrypted and becomes a security concern. I see there is a feature request to implement this - https://jira.atlassian.com/browse/BSERV-11650

One of the reasons why we would like to use xpack security.

Thanks

Ram

Like Cristiano Mariano likes this

Hi @Ramprasad Baliga ! How are you doing?

According to Bitbucket documentation, you could use other plugins, like Shield (according to Elastic documentation, Shield is now part of X-Pack).

Bitbucket Server also supports authentication to Elasticsearch through other plugins that provide basic authentication, like Elastic's Shield plugin.

Hope this helps!

Comment

Log in or Sign up to comment
TAGS

Atlassian Community Events