Issue Summary

Specifying Bitbucket Package Registry image as build image causes error with "IP Allowlist" enabled workspaces.

YAML

image:
  name: crg.apkg.io/$WRKSPACE_ID/$REPO_SLUG:$TAG
  username: $ATLASSIAN_EMAIL
  password: $API_TOKEN
  email: $ATLASSIAN_EMAIL 

Pipeline Error

Container 'build' failed to pull image: 'failed to pull and unpack image "crg.apkg.io/$WRKSPACE_ID/$REPO_SLUG:$TAG": failed to resolve reference "crg.apkg.io/$WRKSPACE_ID/$REPO_SLUG:$TAG": pull access denied, repository does not exist or may require authorization: server message: insufficient_scope: authorization failed' 

Steps to Reproduce

1. 1. Enable "IP Allowlist" in the workspace

1. 1. Create and push a Docker image to the Bitbucket Package Registry

1. 1. Use the same image as build image in a Pipeline step with the YAML above

1. 1. Run the Pipeline

Expected Results

Pipeline build fetches and uses the configured image as the build image

Actual Results

Pipeline build fails with the error below shown in the Pipeline UI

Container 'build' failed to pull image: 'failed to pull and unpack image "crg.apkg.io/$WRKSPACE_ID/$REPO_SLUG:$TAG": failed to resolve reference "crg.apkg.io/$WRKSPACE_ID/$REPO_SLUG:$TAG": pull access denied, repository does not exist or may require authorization: server message: insufficient_scope: authorization failed' 

Workaround

The only workaround is to disable "IP Allowlist" in workspace settings and run the Pipeline.