From 083ed06b3ee84b829b36bb22836e606e6accf827 Mon Sep 17 00:00:00 2001 From: Dimitrios Philliou Date: Fri, 2 Aug 2024 09:54:40 -0700 Subject: [PATCH 1/2] =?UTF-8?q?Update=20installing-a-github-app-from-githu?= =?UTF-8?q?b-marketplace-for-your-organ=E2=80=A6=20(#34063)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Joe Clark <31087804+jc-clark@users.noreply.github.com> Co-authored-by: Yumin Wong Co-authored-by: Alex Nguyen <150945400+nguyenalex836@users.noreply.github.com> --- ...ub-app-from-github-marketplace-for-your-organizations.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/content/apps/using-github-apps/installing-a-github-app-from-github-marketplace-for-your-organizations.md b/content/apps/using-github-apps/installing-a-github-app-from-github-marketplace-for-your-organizations.md index 720394d698..661221fd9b 100644 --- a/content/apps/using-github-apps/installing-a-github-app-from-github-marketplace-for-your-organizations.md +++ b/content/apps/using-github-apps/installing-a-github-app-from-github-marketplace-for-your-organizations.md @@ -48,6 +48,12 @@ Admins of repositories that are owned by an organization can also install {% dat The "app manager" role in an organization does not give a person the ability to install a {% data variables.product.prodname_github_app %} in the organization. For more information, see "[AUTOTITLE](/apps/maintaining-github-apps/about-github-app-managers)." +{% ifversion ghec %} + +For enterprise managed user accounts, only enterprise owners can purchase and install a paid {% data variables.product.prodname_github_app %} for an organization in the enterprise. Enterprise members cannot purchase a paid {% data variables.product.prodname_github_app %}. Organization owners with an enterprise managed user account can still install a free {% data variables.product.prodname_github_app %}. + +{% endif %} + ## Installing a {% data variables.product.prodname_github_app %} in your organization {% data reusables.marketplace.visit-marketplace %} From 443e4658a13b14de8e43530fd176227711e34de8 Mon Sep 17 00:00:00 2001 From: Joe Clark <31087804+jc-clark@users.noreply.github.com> Date: Fri, 2 Aug 2024 11:25:18 -0700 Subject: [PATCH 2/2] Add information about using an Azure VNET with GitHub IP allow list (#51865) --- data/reusables/actions/azure-vnet-networking-policies.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/data/reusables/actions/azure-vnet-networking-policies.md b/data/reusables/actions/azure-vnet-networking-policies.md index c765f5e536..c46f22e9ef 100644 --- a/data/reusables/actions/azure-vnet-networking-policies.md +++ b/data/reusables/actions/azure-vnet-networking-policies.md @@ -3,3 +3,5 @@ Because the {% data variables.product.company_short %}-hosted runner's NIC is de For example, if your VNET is configured with an Azure ExpressRoute to provide access to on-premises resources (e.g. Artifactory) or connected to a VPN tunnel to provide access to other cloud-based resources, those access policies also apply to your runners. Additionally, any outbound rules applied to your VNET's network security group (NSG) also apply, giving you the ability to control outbound access for your runners. If you have enabled any network logs monitoring for your VNET, you can also monitor network traffic for your runners. + +{% data variables.product.company_short %}-hosted runners use whatever outbound control your network is using. If your network relies on Azure's default outbound access, the IPs are not predictable and cannot be added to the {% data variables.product.company_short %} IP allow list. For recommendations on using a stable outbound IP, see [Default outbound access](https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/default-outbound-access) in the Azure documentation.