Skip to content

Latest commit

 

History

History
48 lines (30 loc) · 3.13 KB

ip-allowlist.md

File metadata and controls

48 lines (30 loc) · 3.13 KB
Raw

GitHub IP allow list configuration

If your organization is using GitHub's organization IP allow list feature, it needs to be configured properly for the GitHub for Jira app to be able to communicate with your organization's GitHub API.

⚠️ Issue with IP allowlists! Currently, there is an issue with IP allow lists where GitHub blocks some requests to the API even if the correct IP addresses are listed in the allow list. To work around this problem, please follow the steps in the section "Manually setting the allowed IP addresses". Make sure you add each IP address as an individual entry to the allow list (i.e. not as a CIDR range), because it will not work otherwise.

IP address range

The servers of the GitHub for Jira app operate from IP addresses in:

  • CIDR range 13.52.5.96/28 (i.e. from the IP addresses starting with 13.52.5.96 and ending with 13.52.5.111).

  • CIDR range 104.192.138.240/28 (i.e. from the IP addresses starting with 104.192.138.240 and ending with 104.192.138.255).

A machine-readable version of the IP addresses that stays up-to-date is available at https://ip-ranges.atlassian.com/ (filter for the product github-for-jira).

Automatically load IP addresses from the GitHub for Jira app

We maintain the list of IP addresses the GitHub for Jira app's servers operate from in the GitHub app itself. You can automatically use this list by enabling "IP allow list configuration for installed GitHub Apps" as follows:

  • as an admin go to your GitHub org page at https://github.com/<your org>
  • go to the Settings tab
  • in the sidebar, select Organization security
  • scroll down to the IP allow list section
  • enable the checkbox Enable IP allow list configuration for installed GitHub Apps
  • don't forget to hit the save button under the checkbox.

Your GitHub organization is now accessible from the GitHub for Jira app's servers. If the IP addresses change, your IP allow list will be automatically updated.

Manually setting the allowed IP addresses

If you don't want to automatically update your IP allowlist from the list we maintain, you can add the IP addresses manually like this:

  • as an admin go to your GitHub org page at https://github.com/<your org>,
  • go to the Settings tab,
  • then in the sidebar, select Organization security
  • scroll down to the IP allow list section
  • click the + Add button to add an IP address
  • repeat this for all IP addresses in the range mentioned at the start of the page.

Your GitHub organization is now accessible from the GitHub for Jira app's servers. Note that if the IP addresses change, you will have to update them manually.

If problems persist

Feel free to raise an issue contact Atlassian support for guidance and extra help.