Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Bitbucket Cloud does not support webhook secrets, Atlantis integration

Yogi wahyu March 7, 2023

Hi all,
I try to integrate my IAC/Terraform bitbucket repo to Atlantis using webhook, the Atlantis are deployed in GKE, but when I create pull request on allowed repo(already configured on `values.yaml`) it return "Bitbucket Cloud does not support webhook secrets...",  The detail log that I have from Atlantis is like this

{
"level": "warn",
"ts": "2023-03-07T10:26:55.534Z",
"caller": "cmd/server.go:1027",
"msg": "Bitbucket Cloud does not support webhook secrets. This could allow attackers to spoof requests from Bitbucket. Ensure you are allowing only Bitbucket IPs",
"json": {},
"stacktrace": "..."
}

 the `values.yaml` that I used to deploy the Atlantis is like this, any suggestion about my issue? please feel free to answer my question.


# Replace this with your own repo allowlist:
orgAllowlist: bitbucket.org/ORGANIZATION_NAME/REPO_NAME
# logLevel: "debug"

...


# If using Bitbucket, specify like the following:
bitbucket:
user: USER
token: BITBUCKET_APP_TOKEN



Thanks,


1 answer

1 accepted

0 votes
Answer accepted
Theodora Boudale
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 8, 2023

Hi @Yogi wahyu and welcome to the community!

The warning that you get is correct, Bitbucket Cloud webhooks do not support secrets at the moment. We have a feature request about this in our issue tracker:

If you want to restrict access only to Bitbucket IPs, the IP addresses used for Bitbucket Cloud webhook delivery are listed below in the Outgoing Connections section:

Is the delivery of the webhook successful? You can check the following troubleshooting guide:

If you enable history for the webhook and then perform an action that triggers the webhook, what is the status code for this event? If you select View details next to the status code, what response do you see from your server and do you get the body of the request?

Kind regards,
Theodora

Yogi wahyu March 8, 2023

Hi @Theodora Boudale 
Thanks for helping me by reply to this question,
Yes I already solved the issue

Like Theodora Boudale likes this
Theodora Boudale
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 10, 2023

Hi @Yogi wahyu ,

That's good to hear, thank you for the update.

Please feel free to reach out if you ever need anything else!

Kind regards,
Theodora

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PERMISSIONS LEVEL
Site Admin
TAGS
AUG Leaders

Atlassian Community Events