skills.rest
TheViziusGroup
TheViziusGroupOFFICIAL
Explore all skills by this author →
WebsiteGitHub

bitbucket-azure

Guides Bitbucket Pipelines CI/CD configuration and Azure authentication workarounds for Atlassian-based teams.

1|Updated Aug 10, 2026
Search Tags:#ci/cd#deployment#azure#devsecops#oidc#bitbucket pipelines#service principal
One-click install
npx skills add https://github.com/TheViziusGroup/vibe-engineering-skills --skill bitbucket-azure-theviziusgroup
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bitbucket-azure
Source: https://github.com/TheViziusGroup/vibe-engineering-skills/tree/main/plugins/devsecops-cicd/skills/bitbucket-azure
Command: npx skills add https://github.com/TheViziusGroup/vibe-engineering-skills --skill bitbucket-azure-theviziusgroup

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Teams using Bitbucket Pipelines to deploy to Azure face a critical gap: Bitbucket's OIDC tokens cannot authenticate to Microsoft Entra ID, forcing teams to design workarounds for secure credential management, deployment gating, and cost control. ## Core Features & Use Cases - Azure Authentication Mitigations: Provides four concrete patterns for the OIDC gap, including per-environment service principal secrets with auto-rotation, a token broker Azure Function, Azure Pipelines as orchestrator, and HashiCorp Vault as intermediary. - Pipeline Configuration Reference: Covers bitbucket-pipelines.yml structure, YAML anchors, triggers, deployment environments, hosted vs self-hosted runners, and the full catalog of Microsoft/Atlassian Azure deployment pipes. - Platform Comparison and Costing: Compares Bitbucket Pipelines against GitHub Actions and Azure DevOps across OIDC support, hosted OS availability, approval gates, and pricing, with concrete migration trigger thresholds. - Use Case: An Azure shop committed to Jira needs to deploy to AKS from Bitbucket Pipelines without long-lived secrets; this Skill walks through building the token broker Azure Function that exchanges Bitbucket OIDC tokens for short-lived Azure credentials. ## Quick Start Ask how to authenticate Bitbucket Pipelines to Azure for deploying to AKS and receive the recommended credential pattern with working YAML.

Frequently Asked Questions about bitbucket-azure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Can Bitbucket Pipelines OIDC tokens authenticate to Azure?▼

No, Bitbucket OIDC tokens cannot log into Azure Entra ID due to an architectural incompatibility confirmed by Atlassian. Feature request BCLOUD-22206 remains unresolved, so teams must use service principal secrets, a token broker, Vault, or Azure Pipelines instead.

How do I deploy to Azure from Bitbucket Pipelines without stored secrets?▼

Build a token broker Azure Function that validates the BITBUCKET_STEP_OIDC_TOKEN against Bitbucket's JWKS endpoint and mints short-lived credentials on a per-environment App Registration. Alternatively, use HashiCorp Vault's azure secrets engine or run deployment legs on Azure Pipelines with workload identity.

Bitbucket Pipelines vs GitHub Actions vs Azure DevOps for Azure deployments?▼

GitHub Actions and Azure DevOps support native OIDC federation to Azure, hosted Windows and macOS runners, and multi-approver gates; Bitbucket Pipelines does not. Bitbucket fits teams committed to Jira whose Azure surface is App Service, AKS, ACR, or Static Web Apps.

Why does my Bitbucket pipeline docker build run out of memory?▼

The Docker service memory is capped at 1 GB independent of the step size setting. Raising size to 4x alone does not help; you must also set definitions.services.docker.memory explicitly, for example to 3072 MB.

Does Bitbucket Pipelines support Windows or macOS builds?▼

Hosted runners are Linux only, with x86_64 default and ARM available. Windows, macOS, and builds needing private network access require self-hosted runners routed via the runs-on self.hosted label.

How do Bitbucket Pipelines build minutes and pricing work?▼

Standard includes 2,500 workspace-pooled minutes per month and Premium 3,500, with overage at $10 per 1,000 minutes. Step size multipliers consume minutes at the multiplier rate, so a 4x step costs 4 minutes per wall-clock minute.

Related Skills

Explore More Software Engineering Skills→
merceralex397-collabmerceralex397-collab

azure-prepare

Generates azure.yaml, Bicep or Terraform infrastructure, and Dockerfiles for azd-based Azure deployments.

Community
Advanced
BagelHoleBagelHole
46

azure-monitor-audit

Configure Azure Monitor diagnostic settings to export activity logs to Log Analytics.

Community
Intermediate
tylern91tylern91

dependency-scanning

Identify vulnerabilities in third-party dependencies using Snyk, Dependabot, or OWASP Dependency-Check.

Community
Advanced
HermeticOrmusHermeticOrmus

azure-patterns

Implements production Azure infrastructure patterns using Bicep modules, AKS Workload Identity, and Azure DevOps pipelines.

Community
Advanced