Help Center/ CodeArts Repo/ User Guide/ Security Management/ Configuring an IP Whitelist
Updated on 2025-09-23 GMT+08:00

Configuring an IP Whitelist

Configuring a Tenant-Level IP Address Whitelist

You can access and configure the tenant-level IP address whitelist if you are a tenant or an IAM user assigned as the te_admin role by the tenant. For details, see Configuring Repo-Level Permissions.

On the CodeArts homepage, click the avatar and choose All Account Settings. In the navigation pane, choose Repo > IP Address Whitelist. Click Add IP Address to configure a tenant-level IP address whitelist.

IPv4 can be used. The following table lists the formats of IP address whitelists.

Table 1 Parameters for creating an IP address whitelist

Parameter

Description

IPv4

If you select this option, you can specify an IP address, set an IP address range, or set a route in CIDR format. The differences are as follows:

  • IP address: The IP address will be added to the whitelist. For example, you can add the IP address of your personal computer to the whitelist.
  • IP address segment: If you have multiple servers and the IP address segments are consecutive or your IP addresses dynamically change in a network segment, you can add an IP address segment. Example: 100.*.*.0 - 100.*.*.255.
  • CIDR: When your server is on a LAN and uses CIDR routing, you can specify a 32-bit egress IP address of the LAN and the number of bits of a specified network prefix. Requests from the same IP address are accepted if the network prefix is the same as the specified one.

Description

Optional.

Access Control

Optional. Select the corresponding options as needed.

  • Allowed to access the repository: Only whitelisted IP addresses and the repository owner can access the repository.
  • Allowed to download code: If this option is selected, IP addresses in the whitelist can download code online and clone code locally.
  • Allowed to commit code: Only whitelisted IP addresses can modify and upload code online, or commit code locally. Code-based build project orchestration and YAML file synchronization are not affected.

Configuring a Repository-Level IP Address Whitelist

In CodeArts, you can set the IP address range and access for the IP address whitelist to restrict users' access, upload, and download permissions, enhancing repository security.

The IP address whitelist takes effect only for repos whose visibility is Private, Read-only for project members, and Read-only for tenant members.

To configure the repository-level IP address whitelist, you can choose Settings > Security Management > IP Address Whitelist on the repository details page.

IPv4 can be used. This table lists the formats of IP address whitelists.

Click Add IP Whitelist and set parameters by referring to this table. To modify an IP address whitelist, click in the row where the IP address whitelist is located.

FAQs About Configuring IP Address Whitelist

  • If you want to import the repository of another tenant but they have configured an IP address whitelist, the import will fail. In this case, contact your administrator to obtain the proxy IP address and ask the target tenant to add the proxy IP address to the IP address whitelist.
  • To set an IP address whitelist for all repositories of your tenant, log in to the repository list page of CodeArts Repo, click the alias in the upper right corner, and choose All Account Settings > Repo > IP Address Whitelist. The configuration rules are the same as the preceding configuration.