Codebuild running terraform init failing to download bitbucket module

Question

I have a terraform project in bitbucket that I want to plan/apply via codebuild and codepipeline. The project has a module that is hosted on the same bitbucket account.

When the codebuild project runs (under codepipeline), the source is available and I can run git commands against it (using the git-credential-helper), but when running the terraform init it fails to download the terraform module from bitbucket:

│ git@bitbucket.org: Permission denied (publickey).
│ fatal: Could not read from remote repository.

Is there a way to use the git credentials already on the codebuild image or do I have to manually add a certificate to the build? It would be a duplication of the credentials, not something I want to do unless I really have to.

Gary Mclean · Accepted Answer

What is the source of your terraform modules? Are they absolute paths or References to a Git source?

If they are absolute and local modules it will work.

If using a GIT reference to a tag/commit then you will need to auth to bitbucket using something like a SSH key or store the credentials in something like Parameter store and download them during the build so that no credentials are stored in the code.

Codebuild running terraform init failing to download bitbucket module

Relevant content