Hi
We use elastic's xpack security to lock down our elastic and kibana instances.
Bitbucket DC uses elastic search for its code search feature. However, setting up bitbucket to use elastic search requires that we turn off xpack security
xpack.security.enabled: false
My question is how do i get code search to work with xpack security enabled?
I should mention that turning off xpack security is the only way to get code search to work ATM. Bitbucket search fails if it's turned on.
Thank you for your help!
Hi Elton,
Step 3 on https://confluence.atlassian.com/bitbucketserver/install-and-configure-a-remote-elasticsearch-instance-815577748.html outlines how to do authenticated requests from BB using buckler.
CCM
Thank you for responding Craig. The problem is (and I'm sure other folks with a similar setup will run into ), Our elastic stack relies on the xpack plugin for everything (kibana, apm-server, logstash and so many more). if we disable xpack security and enable buckler, all other elastic stack apps fail to start or do not work as expected.
Would be nice to have bitbucket work with the xpack security.
Edit: Trying to enable xpack security and buckler causes the following error.
Caused by: java.lang.IllegalArgumentException: Cannot have more than one plugin implementing a REST wrapper
at org.elasticsearch.action.ActionModule.<init>(ActionModule.java:382) ~[elasticsearch-6.5.3.jar:6.5.3]
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
While I haven’t tried this for this specific combination, I would expect the following to work.If you leave xpack enabled - add a user with the required permissions that BB will need, give it a password and then put those details in to Bitbucket authentication configuration.
CCM
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Bitbucket search always fails when
xpack.security.enabled: true
ERROR [http-nio-8082-exec-115] "POST /rest/search/latest/search HTTP/1.0"
c.a.b.i.s.search.rest.SearchResource Unexpected response code from Elasticsearch: 403
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
No solution. The only way forward is to disable search till bitbucket supports ES 7
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Elton/All,
I understand BB Data centre search functionality does not work when xpack security is enabled in remote elastic search node. However can someone please tell me if you were atleast able to make a connection to elastic search from your BB cluster with the xpack security enabled?
Thanks
Ram
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Atlassian Government Cloud has achieved FedRAMP Authorization at the Moderate level! Join our webinar to learn how you can accelerate mission success and move work forward faster in cloud, all while ensuring your critical data is secure.
Register NowOnline forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.