Help Center/ CodeArts Repo/ User Guide/ Security Management/ Configuring an IP Whitelist
Updated on 2025-07-24 GMT+08:00

Configuring an IP Whitelist

You can access and configure the tenant-level IP address whitelist if you are a tenant or an IAM user assigned as the te_admin role by the tenant. For details, see Configuring Repo-Level Permissions.

In CodeArts, you can set the IP address range and access for the IP address whitelist to restrict users' access, upload, and download permissions, enhancing repository security. The IP address whitelist takes effect only for repos whose visibility is Private, Read-only for project members, and Read-only for tenant members.

To configure the IP address whitelist, you can choose Settings > Security Management > IP Address Whitelist on the repository details page. IPv4 can be used. The following table lists the three formats of IP address whitelists.

Click Add IP Whitelist and set parameters by referring to the following table. To modify an IP address whitelist, click in the row where the IP address whitelist is located.

Table 1 Parameters for creating an IP address whitelist

Parameter

Description

IPv4

If you select this option, you can specify an IP address, set an IP address range, or set a route in CIDR format. The differences are as follows:

  • IP address: The IP address will be added to the whitelist. For example, you can add the IP address of your personal computer to the whitelist.
  • IP address segment: If you have multiple servers and the IP address segments are consecutive or your IP addresses dynamically change in a network segment, you can add an IP address segment. Example: 100.*.*.0 - 100.*.*.255.
  • CIDR: When your server is on a LAN and uses CIDR routing, you can specify a 32-bit egress IP address of the LAN and the number of bits of a specified network prefix. Requests from the same IP address are accepted if the network prefix is the same as the specified one.

Description

Optional.

Access Control

Optional. Select the corresponding options as needed.

  • Allowed to access the repository: Only whitelisted IP addresses and the repository owner can access the repository.
  • Allowed to download code: If this option is selected, IP addresses in the whitelist can download code online and clone code locally.
  • Allowed to commit code: Only whitelisted IP addresses can modify and upload code online, or commit code locally. Code-based build project orchestration and YAML file synchronization are not affected.

FAQs About Configuring IP Address Whitelist

  • If you want to import the repository of another tenant but they have configured an IP address whitelist, the import will fail. In this case, contact your administrator to obtain the proxy IP address and ask the target tenant to add the proxy IP address to the IP address whitelist.
  • To set an IP address whitelist for all repositories of your tenant, log in to the repository list page of CodeArts Repo, click the alias in the upper right corner, and choose All Account Settings > Repo > IP Address Whitelist. The configuration rules are the same as the preceding configuration.