Secured Solution to Connect Private Jenkins to Bitbucket Cloud

[Dan Zaltsman]

I am currently using a private Jenkins instance and would like to integrate it securely with Bitbucket Cloud. My primary concerns are around ensuring that the communication between Jenkins and Bitbucket remains secure while adhering to best practices for authentication and data exchange.

Could you kindly provide information or recommend a secured solution for this use case?

[Theodora Boudale]

Hi Dan and welcome to the community!

As far as I'm aware, most integrations between Bitbucket Cloud and Jenkins use webhooks. There is a Bitbucket app in the Atlassian Marketplace:

• https://marketplace.atlassian.com/search?query=jenkins&product=bitbucket&hosting=cloud

There are also several Bitbucket plugins for Jenkins:

• https://plugins.jenkins.io/ui/search/?query=bitbucket

Bitbucket webhooks make requests to another server over the internet, so the Jenkins server will need to have a public IP address or domain name for Bitbucket to be able to reach it.

If your server is behind a firewall and if the integration you use indeed uses webhooks, you may need to allowlist the IP addresses used for webhook delivery. You can find these IP ranges on the following page, section Outgoing connections:

• https://support.atlassian.com/organization-administration/docs/ip-addresses-and-domains-for-atlassian-cloud-products/#Outgoing-Connections

If you need to whitelist additional IPs for the Jenkins server to be able to clone Bitbucket repos or run API calls, you can find the IPs used by Bitbucket Cloud on the following page, section Valid IP addresses for bitbucket.org, api.bitbucket.org, and altssh.bitbucket.org:

• https://support.atlassian.com/bitbucket-cloud/docs/what-are-the-bitbucket-cloud-ip-addresses-i-should-use-to-configure-my-corporate-firewall/

Kind regards,
Theodora