Skip to content

Commit 59618c6

Browse files
authored
[GHEC version] Version content for IP allow lists (github#26067)
1 parent a6b4d5e commit 59618c6

File tree

7 files changed

+23
-12
lines changed

7 files changed

+23
-12
lines changed

content/actions/hosting-your-own-runners/about-self-hosted-runners.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -187,7 +187,7 @@ github-registry-files.githubusercontent.com
187187

188188
In addition, your workflow may require access to other network resources. For example, if your workflow installs packages or publishes containers to {% data variables.product.prodname_dotcom %} Packages, then the runner will also require access to those network endpoints.
189189

190-
If you use an IP address allow list for your {% data variables.product.prodname_dotcom %} organization or enterprise account, you must add your self-hosted runner's IP address to the allow list. For more information, see "[Managing allowed IP addresses for your organization](/organizations/keeping-your-organization-secure/managing-allowed-ip-addresses-for-your-organization#using-github-actions-with-an-ip-allow-list)" or "[Enforcing policies for security settings in your enterprise](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise)".
190+
If you use an IP address allow list for your {% data variables.product.prodname_dotcom %} organization or enterprise account, you must add your self-hosted runner's IP address to the allow list. For more information, see "[Managing allowed IP addresses for your organization](/{% ifversion fpt %}enterprise-cloud@latest/{% endif %}/organizations/keeping-your-organization-secure/managing-allowed-ip-addresses-for-your-organization#using-github-actions-with-an-ip-allow-list)" or "[Enforcing policies for security settings in your enterprise](/{% ifversion fpt %}enterprise-cloud@latest/{% endif %}admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
191191

192192
{% else %}
193193

content/codespaces/managing-codespaces-for-your-organization/enabling-codespaces-for-your-organization.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ To use codespaces in your organization, you must do the following:
2626
- Ensure that users have [at least write access](/organizations/managing-access-to-your-organizations-repositories/repository-permission-levels-for-an-organization) to the repositories where they want to use a codespace.
2727
- [Enable {% data variables.product.prodname_codespaces %} for users in your organization](#enable-codespaces-for-users-in-your-organization). You can choose to allow {% data variables.product.prodname_codespaces %} for selected users or only for specific users.
2828
- [Set a spending limit](/billing/managing-billing-for-github-codespaces/managing-spending-limits-for-codespaces)
29-
- Ensure that your organization does not have an IP address allow list enabled. For more information, see "[Managing allowed IP addresses for your organization](/organizations/keeping-your-organization-secure/managing-allowed-ip-addresses-for-your-organization)."
29+
- Ensure that your organization does not have an IP address allow list enabled. For more information, see "[Managing allowed IP addresses for your organization](/{% ifversion fpt %}enterprise-cloud@latest/{% endif %}organizations/keeping-your-organization-secure/managing-allowed-ip-addresses-for-your-organization#using-github-actions-with-an-ip-allow-list){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
3030

3131
By default, a codespace can only access the repository from which it was created. If you want codespaces in your organization to be able to access other organization repositories that the codespace creator can access, see "[Managing access and security for {% data variables.product.prodname_codespaces %}](/codespaces/managing-codespaces-for-your-organization/managing-access-and-security-for-your-organizations-codespaces)."
3232

content/developers/apps/building-github-apps/managing-allowed-ip-addresses-for-a-github-app.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ Enterprise and organization owners can restrict access to assets by configuring
1717
When an organization has an allow list, third-party applications that connect via a {% data variables.product.prodname_github_app %} will be denied access unless both of the following are true:
1818

1919
* The creator of the {% data variables.product.prodname_github_app %} has configured an allow list for the application that specifies the IP addresses at which their application runs. See below for details of how to do this.
20-
* The organization owner has chosen to permit the addresses in the {% data variables.product.prodname_github_app %}'s allow list to be added to their own allow list. For more information, see "[Managing allowed IP addresses for your organization](/organizations/keeping-your-organization-secure/managing-allowed-ip-addresses-for-your-organization#allowing-access-by-github-apps)."
20+
* The organization owner has chosen to permit the addresses in the {% data variables.product.prodname_github_app %}'s allow list to be added to their own allow list. For more information, see "[Managing allowed IP addresses for your organization](/{% ifversion fpt %}enterprise-cloud@latest/{% endif %}organizations/keeping-your-organization-secure/managing-allowed-ip-addresses-for-your-organization#using-github-actions-with-an-ip-allow-list){% ifversion fpt %}" in the {% data variables.product.prodname_ghe_cloud %} documentation.{% else %}."{% endif %}
2121

2222
{% data reusables.apps.ip-allow-list-only-apps %}
2323

content/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-allowed-ip-addresses-for-your-organization.md

Lines changed: 9 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,26 +1,31 @@
11
---
22
title: Managing allowed IP addresses for your organization
33
intro: You can restrict access to your organization's private assets by configuring a list of IP addresses that are allowed to connect.
4-
product: '{% data reusables.gated-features.allowed-ip-addresses %}'
54
redirect_from:
65
- /github/setting-up-and-managing-organizations-and-teams/managing-allowed-ip-addresses-for-your-organization
76
- /organizations/keeping-your-organization-secure/managing-allowed-ip-addresses-for-your-organization
87
versions:
9-
fpt: '*'
108
ghae: '*'
119
ghec: '*'
1210
topics:
1311
- Organizations
1412
- Teams
1513
shortTitle: Manage allowed IP addresses
14+
permissions: Organization owners can manage allowed IP addresses for an organization.
1615
---
1716

18-
Organization owners can manage allowed IP addresses for an organization.
19-
2017
## About allowed IP addresses
2118

2219
You can restrict access to private organization assets by configuring an allow list for specific IP addresses. {% data reusables.identity-and-permissions.ip-allow-lists-example-and-restrictions %}
2320

21+
{% ifversion ghec %}
22+
{% note %}
23+
24+
**Note:** Only organizations that use {% data variables.product.prodname_ghe_cloud %} can use IP allow lists. {% data reusables.enterprise.link-to-ghec-trial %}
25+
26+
{% endnote %}
27+
{% endif %}
28+
2429
{% data reusables.identity-and-permissions.ip-allow-lists-cidr-notation %}
2530

2631
{% data reusables.identity-and-permissions.ip-allow-lists-enable %}

content/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -52,9 +52,9 @@ To search for specific events, use the `action` qualifier in your query. Actions
5252
| [`discussion_post_reply`](#discussion_post_reply-category-actions) | Contains all activities related to replies to discussions posted to a team page.{% ifversion fpt or ghes or ghec %}
5353
| [`enterprise`](#enterprise-category-actions) | Contains activities related to enterprise settings. | {% endif %}
5454
| [`hook`](#hook-category-actions) | Contains all activities related to webhooks.
55-
| [`integration_installation_request`](#integration_installation_request-category-actions) | Contains all activities related to organization member requests for owners to approve integrations for use in the organization. |
56-
| [`ip_allow_list`](#ip_allow_list) | Contains activities related to enabling or disabling the IP allow list for an organization.
57-
| [`ip_allow_list_entry`](#ip_allow_list_entry) | Contains activities related to the creation, deletion, and editing of an IP allow list entry for an organization.
55+
| [`integration_installation_request`](#integration_installation_request-category-actions) | Contains all activities related to organization member requests for owners to approve integrations for use in the organization. |{% ifversion ghec or ghae %}
56+
| [`ip_allow_list`](#ip_allow_list-category-actions) | Contains activities related to enabling or disabling the IP allow list for an organization.
57+
| [`ip_allow_list_entry`](#ip_allow_list_entry-category-actions) | Contains activities related to the creation, deletion, and editing of an IP allow list entry for an organization.{% endif %}
5858
| [`issue`](#issue-category-actions) | Contains activities related to deleting an issue. {% ifversion fpt or ghec %}
5959
| [`marketplace_agreement_signature`](#marketplace_agreement_signature-category-actions) | Contains all activities related to signing the {% data variables.product.prodname_marketplace %} Developer Agreement.
6060
| [`marketplace_listing`](#marketplace_listing-category-actions) | Contains all activities related to listing apps in {% data variables.product.prodname_marketplace %}.{% endif %}{% ifversion fpt or ghes or ghec %}
@@ -360,6 +360,7 @@ An overview of some of the most common actions that are recorded as events in th
360360
| `create` | Triggered when an organization member requests that an organization owner install an integration for use in the organization.
361361
| `close` | Triggered when a request to install an integration for use in an organization is either approved or denied by an organization owner, or canceled by the organization member who opened the request.
362362

363+
{% ifversion ghec or ghae %}
363364
### `ip_allow_list` category actions
364365

365366
| Action | Description
@@ -376,6 +377,7 @@ An overview of some of the most common actions that are recorded as events in th
376377
| `create` | Triggered when an IP address was added to an IP allow list.
377378
| `update` | Triggered when an IP address or its description was changed.
378379
| `destroy` | Triggered when an IP address was deleted from an IP allow list.
380+
{% endif %}
379381

380382
### `issue` category actions
381383

data/reusables/gated-features/allowed-ip-addresses.md

Lines changed: 0 additions & 1 deletion
This file was deleted.

lib/redirects/static/redirect-exceptions.txt

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -445,4 +445,9 @@
445445
- /articles/restricting-the-ability-to-add-outside-collaborators-to-organization-repositories
446446
- /articles/setting-permissions-for-adding-outside-collaborators
447447
- /github/setting-up-and-managing-organizations-and-teams/setting-permissions-for-adding-outside-collaborators
448-
- /organizations/managing-organization-settings/setting-permissions-for-adding-outside-collaborators
448+
- /organizations/managing-organization-settings/setting-permissions-for-adding-outside-collaborators
449+
450+
/enterprise-cloud@latest/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-allowed-ip-addresses-for-your-organization
451+
- /github/setting-up-and-managing-organizations-and-teams/managing-allowed-ip-addresses-for-your-organization
452+
- /organizations/keeping-your-organization-secure/managing-allowed-ip-addresses-for-your-organization
453+
- /organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-allowed-ip-addresses-for-your-organization

0 commit comments

Comments
 (0)