As an admin, I would like to specify the allowList of the URLs based on which workspaces / CDEs can be started

[ibuziuk]

Is your task related to a problem? Please describe

As an admin, I would like to specify the allowList of the URLs based on which workspaces / CDEs can be started e.g.

• only from private GitHub, BitBucket, Azure, Gitlab
• only from particular org
• only from ssh of particular repo etc

Describe the solution you'd like

potential СR semantics

  devEnvironments:
      allowList / allowURLs / ? :
         - https://github.com # allow from github
         - git@github.com # allow from github over ssh
         - https://github.com/eclipse-che # allow particular group
         - https://github.com/eclipse-che/che # allow particular repo from github
         - etc.. # similar for other providers

Describe alternatives you've considered

N/A

Additional context

allowList is empty by default - all repos should be allowes

[tolusha]

devEnvironments:
  allowedWorkspaceStartUrls:
    - "https://github.com"
    - "https://gitlab.com/your-group"
 

[ibuziuk]

@tolusha I believe we need smth. better

[ibuziuk]

@tolusha allowedGitUrls / allowedGitURLs ?

[tolusha]

It might be any urls, not just git ones

[tolusha]

allowedWorkspaceSourceUrls

[ibuziuk]

we should not use Workspace wording IMO.

It might be any urls, not just git ones

How come? we support only git no? no matter if it is self-hosted / ssh / provider etc.

[tolusha]

I mean it can be a raw devfile url.
Which basically can be anything.

[ibuziuk]

devEnvironments:
  allowedUrls | allowedSourceUrls 

?

[ibuziuk]

@tolusha all PRs seems to be merged. Can we close?

[tolusha]

I am writing the documentation..