Could you please provide a deployment diagram for Bitbucket Pipelines on premise

[Phil Daveran]

We are currently looking to move away from local hosted git source code using Bamboo server deployments. We are looking at using Bitbucket cloud/Bitbucket pipelines as we already use Jira/Confluence from Atlassian. We intend to use Bitbucket Cloud and will be deploying to on-premise servers.

Could you please provide architecture/deployment diagrams of the different  options (using a runner vs deploying direct). I need these to show our CTO and CSO how it will work/what access will need to be given.

[Theodora Boudale · Accepted solution]

Hi Phil and welcome to the community!

If you use Bitbucket Pipelines that run on Atlassian's infrastructure and you want to deploy to your on-remise servers behind a firewall, you will need to whitelist the following IP addresses that are used by Bitbucket Pipelines build environments:

• https://support.atlassian.com/bitbucket-cloud/docs/what-are-the-bitbucket-cloud-ip-addresses-i-should-use-to-configure-my-corporate-firewall/#Valid-IP-addresses-for-Bitbucket-Pipelines-build-environments

There are several ways to deploy, e.g. rsync, scp, ftp. We have the following pipes that can be used when running Pipelines builds on Atlassian's infrastructure:

• https://bitbucket.org/atlassian/rsync-deploy/src/master/
• https://bitbucket.org/atlassian/scp-deploy/src/master/
• https://bitbucket.org/atlassian/sftp-deploy/src/master/
• https://bitbucket.org/atlassian/ftp-deploy/src/master/
• https://bitbucket.org/atlassian/ssh-run/src/master/ (it can be used to run a script on your server)

You could also use the respective Linux commands instead of the pipes.

If you use a self-hosted runner, you will need to whitelist the IP addresses listed here for the runner to work (the runner needs to communicate with Bitbucket to update its status and upload build logs that show on the website):

• https://support.atlassian.com/bitbucket-cloud/docs/ip-addresses-for-runners-behind-corporate-firewalls/

The pipes I listed earlier can also be used with a self-hosted Linux Docker runner, but not with the rest of the runners since they don't use Docker.

Linux Shell and MacOS runners use Bash to run pipeline steps on the host machine, while Windows runners use PowerShell. So, you can use any command line tool that can be used from Bash and PowerShell respectively.

Kind regards,
Theodora

[Phil Daveran]

Many thanks Theodora