Is there an API for IP Whitelisting (Access to my repo)

[Karl Dagenais]

I want some of my ephemeral servers to have access to my repo. Is there a way that I can put a step in a pipeline where I get the public IP of the host and add it to my whitelist before it tries to pull?

Thanks

[mkleint]

Are you trying to clone your repository from that ephemeral server?

I think an easier approach is to create a SSH Access Key via https://confluence.atlassian.com/bitbucket/access-keys-294486051.html and provide  the ephemeral service with the SSH keys to be able to clone the repository? avoiding pipelines altogether.

[Karl Dagenais]

Yes, I'm trying to clone a repo in an ephemeral server. Thanks for the good suggestion and I believe is necessary, but if my server's public IP is not whitelisted, regardless of the key it cannot clone any of the repos in my organization. Perhaps I'm overlooking something.

[mkleint]

I suppose if you have IP whitelisting enabled, that would prevent access with an Access Key.

Can you setup subnet that the ephemeral servers will be created in and whitelist it? https://confluence.atlassian.com/bitbucket/control-access-to-your-private-content-862621261.html#Controlaccesstoyourprivatecontent-ip_whitelistingWhitelistingIPaddresses

I'm not aware of a public API that would allow you to script adding/removing individual IP addresses on the fly.

[Karl Dagenais]

I've found a work-around for what originally triggered this inquiry, but I suppose a NAT gateway is the only real way to address this properly. Thanks for your help.