🐛 Source Gitlab: disallow http in cloud, disallow endpoints in URLs (#27346)

* Connector health: source hubspot, gitlab, snapchat-marketing: fix builds

* #26254 source Gitlab: disallow enpoints in URLs, disallow bare http in cloud

* source gitlab: update changelog

* #26254 source gitlab: rm http from spec

airbyte-integrations/connectors/source-gitlab/source_gitlab/source.py

@@ -3,6 +3,7 @@
 #
 
 
+import os
 import pendulum
 from typing import Any, List, Mapping, MutableMapping, Optional, Tuple, Union
 
@@ -42,6 +43,7 @@ from .streams import (
     Tags,
     Users,
 )
+from .utils import parse_url
 
 
 class SingleUseRefreshTokenGitlabOAuth2Authenticator(SingleUseRefreshTokenOauth2Authenticator):
@@ -129,7 +131,16 @@ class SourceGitlab(AbstractSource):
         for stream_slice in stream.stream_slices(sync_mode=SyncMode.full_refresh):
             yield from stream.read_records(sync_mode=SyncMode.full_refresh, stream_slice=stream_slice)
 
+    @staticmethod
+    def _is_http_allowed() -> bool:
+        return os.environ.get("DEPLOYMENT_MODE", "").upper() != "CLOUD"
+
     def check_connection(self, logger, config) -> Tuple[bool, any]:
+        is_valid, scheme, _ = parse_url(config["api_url"])
+        if not is_valid:
+            return False, "Invalid API resource locator."
+        if scheme == "http" and not self._is_http_allowed():
+            return False, "Http scheme is not allowed in this environment. Please use `https` instead."
         try:
             projects = self._projects_stream(config)
             for stream_slice in projects.stream_slices(sync_mode=SyncMode.full_refresh):