and **Secret** values. Copy these values, as you need them to configure Jira.
1. Check **API** in the **Scopes** section, and clear any other checkboxes.
## Configure Jira for DVCS
1. Click **Save application**. GitLab displays the generated **Application ID**
and **Secret** values. Copy these values, which you use in Jira.
If you use Jira Cloud and GitLab.com, use the [GitLab for Jira app](connect-app.md)
unless you specifically need the DVCS Connector.
## Jira DVCS Connector setup
Configure this connection when you want to import all GitLab commits and branches,
If you're using GitLab.com and Jira Cloud, use the
for the groups you specify, into Jira. This import takes a few minutes and, after
[GitLab for Jira app](connect-app.md) unless you have a specific need for the DVCS Connector.
it completes, refreshes every 60 minutes:
1. Ensure you have completed the [GitLab configuration](#gitlab-account-configuration-for-dvcs).
1. Ensure you have completed the [GitLab configuration](#configure-a-gitlab-application-for-dvcs).
1.If you're using Jira Server, go to **Settings (gear) > Applications > DVCS accounts**.
1.Go to your DVCS account:
If you're using Jira Cloud, go to **Settings (gear) > Products > DVCS accounts**.
-*For Jira Server,* go to **Settings (gear) > Applications > DVCS accounts**.
1. Click **Link GitHub Enterprise account** to start creating a new integration.
-*For Jira Cloud,* go to **Settings (gear) > Products > DVCS accounts**.
(We're pretending to be GitHub in this integration, until there's additional platform support in Jira.)
1. To create a new integration, select the appropriate value for **Host**:
1. Complete the form:
-*For Jira versions 8.14 and later:* Select **GitLab** or
<!-- vale gitlab.Substitutions = NO -->
1. Select **GitHub Enterprise** for the **Host** field.
**GitLab Self-Hosted**.
<!-- vale gitlab.Substitutions = YES -->
1. In the **Team or User Account** field, enter either:
-*For Jira versions 8.13 and earlier:* Select **GitHub Enterprise**.
1. For **Team or User Account**, enter either:
- The relative path of a top-level GitLab group that you have access to.
- The relative path of a top-level GitLab group that you have access to.
- The relative path of your personal namespace.
- The relative path of your personal namespace.
![Creation of Jira DVCS integration](img/jira_dev_panel_jira_setup_2.png)
1. In the **Host URL** field, enter the URI appropriate for your version of GitLab,
replacing `<gitlab.example.com>` with your GitLab instance domain:
1. In the **Host URL** field, enter `https://<gitlab.example.com>/`,
-*For GitLab versions 11.3 and later,* use `https://<gitlab.example.com>/`.
replacing `<gitlab.example.com>` with your GitLab instance domain. For example, if you are using GitLab.com,
-*For GitLab versions 11.2 and earlier,* use
this would be `https://gitlab.com/`.
`https://<gitlab.example.com>/-/jira`.
NOTE:
If using a GitLab version earlier than 11.3 the **Host URL** value should be `https://<gitlab.example.com>/-/jira`
1. For the **Client ID** field, use the **Application ID** value from the previous section.
1. For the **Client Secret** field, use the **Secret** value from the previous section.
1. For **Client ID**, use the **Application ID** value from the previous section.
1. For **Client Secret**, use the **Secret** value from the previous section.
1. Ensure that the rest of the checkboxes are checked.
1. Ensure that the rest of the checkboxes are checked.
1. Select **Add** to complete and create the integration.
1. Click **Add** to complete and create the integration.
To connect additional GitLab projects from other GitLab top-level groups, or
personal namespaces, repeat the previous steps with additional Jira DVCS accounts.
Jira takes up to a few minutes to know about (import behind the scenes) all the commits and branches
for all the projects in the GitLab group you specified in the previous step. These are refreshed
every 60 minutes.
In the future, we plan on implementing real-time integration. If you need
After you configure the integration, read more about [how to test and use it](index.md#usage).
to refresh the data manually, you can do this from the `Applications -> DVCS
accounts` screen where you initially set up the integration:
![Refresh GitLab information in Jira](img/jira_dev_panel_manual_refresh.png)
## Refresh data imported to Jira
To connect additional GitLab projects from other GitLab top-level groups (or personal namespaces), repeat the previous
Jira imports the commits and branches every 60 minutes for your projects. You
steps with additional Jira DVCS accounts.
can refresh the data manually from the Jira interface:
Now that the integration is configured, read more about how to test and use it in [Usage](index.md#usage).
1. Sign in to your Jira instance as the user you configured the integration with.
1. Go to **Settings (gear) > Applications**.
1. Select **DVCS accounts**.
1. In the table, for the repository you want to refresh, in the **Last Activity**
column, select the icon:
![Refresh GitLab information in Jira](img/jira_dev_panel_manual_refresh.png)
## Troubleshooting your DVCS connection
## Troubleshooting your DVCS connection
...
@@ -100,39 +100,46 @@ Refer to the items in this section if you're having problems with your DVCS conn
...
@@ -100,39 +100,46 @@ Refer to the items in this section if you're having problems with your DVCS conn
### Jira cannot access GitLab server
### Jira cannot access GitLab server
If you complete the **Add New Account** form, authorize access, and you receive
this error, Jira and GitLab cannot connect. No other error messages
appear in any logs:
```plaintext
```plaintext
Error obtaining access token. Cannot access https://gitlab.example.com from Jira.
Error obtaining access token. Cannot access https://gitlab.example.com from Jira.
```
```
This error message is generated in Jira, after completing the **Add New Account**
### SSL and TLS problems
form and authorizing access. It indicates a connectivity issue from Jira to
GitLab. No other error messages appear in any logs.
If there was an issue with SSL/TLS, this error message is generated.
Problems with SSL and TLS can cause this error message:
```plaintext
Error obtaining access token. Cannot access https://gitlab.example.com from Jira.
```
- The [GitLab Jira integration](../../user/project/integrations/jira.md) requires GitLab to connect to Jira. Any
- The [GitLab Jira integration](../../user/project/integrations/jira.md) requires
TLS issues that arise from a private certificate authority or self-signed
GitLab to connect to Jira. Any TLS issues that arise from a private certificate
certificate [are resolved on the GitLab server](https://docs.gitlab.com/omnibus/settings/ssl.html#other-certificate-authorities),
authority or self-signed certificate are resolved
[on the GitLab server](https://docs.gitlab.com/omnibus/settings/ssl.html#other-certificate-authorities),
as GitLab is the TLS client.
as GitLab is the TLS client.
- The Jira Development panel integration requires Jira to connect to GitLab, which
- The Jira Development panel integration requires Jira to connect to GitLab, which
causes Jira to be the TLS client. If your GitLab server's certificate is not
causes Jira to be the TLS client. If your GitLab server's certificate is not
issued by a public certificate authority, the Java Truststore on Jira's server
issued by a public certificate authority, the Java Truststore on Jira's server
needs to have the appropriate certificate added to it (such as your organization's
must have the appropriate certificate (such as your organization's
root certificate).
root certificate) added to it .
Refer to Atlassian's documentation and Atlassian Support for assistance setting up Jira correctly:
Refer to Atlassian's documentation and Atlassian Support for assistance setting up Jira correctly:
-[Adding a certificate to the trust store](https://confluence.atlassian.com/kb/how-to-import-a-public-ssl-certificate-into-a-jvm-867025849.html).
-[Add a certificate](https://confluence.atlassian.com/kb/how-to-import-a-public-ssl-certificate-into-a-jvm-867025849.html)
- Simplest approach is to use [`keytool`](https://docs.oracle.com/javase/8/docs/technotes/tools/unix/keytool.html).
to the trust store.
- The simplest approach is [`keytool`](https://docs.oracle.com/javase/8/docs/technotes/tools/unix/keytool.html).
- Add additional roots to Java's default Truststore (`cacerts`) to allow Jira to
- Add additional roots to Java's default Truststore (`cacerts`) to allow Jira to
also trust public certificate authorities.
also trust public certificate authorities.
- If the integration stops working after upgrading Jira's Java runtime, this
- If the integration stops working after upgrading Jira's Java runtime, the
might be because the `cacerts` Truststore got replaced.
`cacerts` Truststore may have been replaced during the upgrade.
-[Troubleshooting connectivity up to and including TLS handshaking](https://confluence.atlassian.com/kb/unable-to-connect-to-ssl-services-due-to-pkix-path-building-failed-error-779355358.html),
-Troubleshooting connectivity [up to and including TLS handshaking](https://confluence.atlassian.com/kb/unable-to-connect-to-ssl-services-due-to-pkix-path-building-failed-error-779355358.html),
using the a java class called `SSLPoke`.
using the a java class called `SSLPoke`.
- Download the class from Atlassian's knowledge base to a directory on Jira's server, such as `/tmp`.
- Download the class from Atlassian's knowledge base to Jira's server, for example to `/tmp`.
- Use the same Java runtime as Jira.
- Use the same Java runtime as Jira.
- Pass all networking-related parameters that Jira is called with, such as proxy
- Pass all networking-related parameters that Jira is called with, such as proxy
settings or an alternative root Truststore (`-Djavax.net.ssl.trustStore`):
settings or an alternative root Truststore (`-Djavax.net.ssl.trustStore`):
...
@@ -154,38 +161,42 @@ The requested scope is invalid, unknown, or malformed.
...
@@ -154,38 +161,42 @@ The requested scope is invalid, unknown, or malformed.
Potential resolutions:
Potential resolutions:
- Verify the URL shown in the browser after being redirected from Jira in step 5 of [Jira DVCS Connector Setup](#jira-dvcs-connector-setup) includes `scope=api` in the query string.
1. Verify that the URL shown in the browser after being redirected from Jira in the
- If `scope=api` is missing from the URL, return to [GitLab account configuration](#gitlab-account-configuration-for-dvcs) and ensure the application you created in step 1 has the `api` box checked under scopes.
[Jira DVCS connector setup](#configure-jira-for-dvcs) includes `scope=api` in
the query string.
1. If `scope=api` is missing from the URL, edit the