Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-15385

SSH public key be store in repository instead of user's account

    XMLWordPrintable

Details

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

    Description

        When using Bamboo 5.6+ and Stash 3.2+ newly created Application Link with default settings:

      • The servers have the same set of users and usernames disabled
      • I am an administrator on both instances enabled

        will result in application link created with:
      • Trusted Apps authentication disabled
      • OAuth authentication enabled:
        • Allow 2-Legged OAuth enabled
        • Allow user impersonation through 2-Legged OAuth disabled
      • Basic Auth authentication disabled

      Please, make sure you have "Stash administration >> Settings >> Server Settings >> SSH access" configured as per following:

      [x] SSH enabled
      [x] SSH access keys enabled
      SSH Port: 7999
      
      • When configuring repository definition on Bamboo side (either in "Plan configuration >> Repositories" tab or in "Bamboo administration >> Build resources >> Linked repositories") Bamboo will create SSH keypair and will store private key in the repository configuration and upload public key to Stash (it can be seen in the list of SSH keys of a user X who defined repository on Bamboo side).
      • When running a build Bamboo will present the private key thus making Stash recognise it as user X (independently on how plan was ran).
      Improvement

      Instead of storing public key under the users' account, it would be beneficial storing it under the repository itself, avoiding the necessity of:

      1. if a user is removed from Stash, it is required to redefine repository settings in Bamboo to new SSH keypair be generated
      2. easier to manage repository permissions
        Please let me know if you have any more questions related to this.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              rsperafico Rafael Sperafico (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: