Resolved -
The incident has now been resolved and the service is operating normally for all customers.
Jun 11, 17:17 PDT
Monitoring -
Atlassian has deployed a fix for their incident affecting Bitbucket OAuth login, and we have confirmed that Bitbucket authentication requests from Pulumi Cloud are succeeding again. Error rates have returned to normal levels and sign-in with Bitbucket is working.
Jun 11, 17:02 PDT
Identified -
Atlassian has acknowledged an incident affecting Bitbucket OAuth login,
which is the cause of the Bitbucket sign-in and authentication failures
affecting Pulumi Cloud. Their incident is being tracked at:
https://bitbucket.status.atlassian.com/incidents/h51sr145gsmx
The issue is external to Pulumi, and no action is required from Pulumi
customers. Until Atlassian resolves their incident, customers signing in
with a Bitbucket identity may continue to experience failed sign-ins and
intermittent Console and API errors after their current session token
expires. Customers using GitHub, GitLab, email, or SSO identities remain
unaffected.
Workaround: Customers whose Pulumi account has an additional sign-in method
(GitHub, GitLab, email/password, or SSO) can continue to sign in using that
method.
Jun 11, 15:56 PDT
Investigating -
We are investigating an issue affecting customers who sign in to Pulumi Cloud
with a Bitbucket identity or use Bitbucket-connected accounts.
Beginning at approximately 06:00 UTC on June 11, requests to refresh Bitbucket
authentication tokens began failing. Affected users may experience failed
sign-ins with Bitbucket, as well as intermittent errors in the Pulumi Console
and API after their current Bitbucket session token expires (these tokens
expire every two hours). Integrations that rely on Bitbucket credentials may
also be affected.
Our investigation indicates the failures originate from Bitbucket's OAuth
token service rather than Pulumi infrastructure, and we have engaged Atlassian
support. Customers using GitHub, GitLab, email, or SSO identities
are unaffected.
Workaround: Customers whose Pulumi account has an additional sign-in method
(GitHub, GitLab, email/password, or SSO) can continue to sign in using that
method.
We will post updates as the investigation progresses.
Jun 11, 15:20 PDT