Pipeline with ssh submodule failing git@bitbucket.org: Permission denied (publickey)

[Andy Tomlin]

I have a private repo which is including an open source repo as a submodule. (I am owner of both)

The pipeline fails 

+ git submodule update --init --recursive

Submodule 'archdef' (git@bitbucket.org:andytomlin/archdef.git) registered for path 'archdef'

Cloning into '/opt/atlassian/pipelines/agent/build/archdef'...

Warning: Permanently added the RSA host key for IP address '18.205.93.0' to the list of known hosts.

git@bitbucket.org: Permission denied (publickey).

fatal: Could not read from remote repository.

Please make sure you have the correct access rights

and the repository exists.

fatal: clone of 'git@bitbucket.org:andytomlin/archdef.git' into submodule path '/opt/atlassian/pipelines/agent/build/archdef' failed

Failed to clone 'archdef'. Retry scheduled

Cloning into '/opt/atlassian/pipelines/agent/build/archdef'...

Warning: Permanently added the RSA host key for IP address '18.205.93.1' to the list of known hosts.

git@bitbucket.org: Permission denied (publickey).

fatal: Could not read from remote repository.

Please make sure you have the correct access rights

and the repository exists.

fatal: clone of 'git@bitbucket.org:andytomlin/archdef.git' into submodule path '/opt/atlassian/pipelines/agent/build/archdef' failed

Failed to clone 'archdef' a second time, aborting

Suggestions?

[Andy Tomlin · Accepted solution]

Nevermind, figured out I needed to add an ssh key to the pipeline

[Krzysztof/Chris]

Hi Andy. You added ssh public key of your open source repo and added it to Access keys in private one? I did it like that and still getting this error

[Andy Tomlin]

No, other way round. I added pipelines key to my open source repo. ie my pipeline now has a key recognized by the open source repo. I found this link useful https://support.atlassian.com/bitbucket-cloud/docs/variables-and-secrets/