Add Jira Connect domain allowlist setting

Roger Meierrequested to merge
gitlab-community/gitlab-org/gitlab:feat/jira-domain-allow-list into master

What does this MR do and why?

Add Jira Connect domain allowlist setting

Restrict which Jira base URL domains may install the GitLab for Jira Cloud app so untrusted Jira tenants cannot connect to the instance. The installed lifecycle event now returns HTTP 422 when the base URL host is not on the allowlist; an empty allowlist keeps the previous allow-all behavior. Admins configure the domain list on the network application settings page and through the settings API.

Closes #554237

Changelog: added

🛠️ with ❤️ at Siemens

References

Screenshots or screen recordings

Before After
image image

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Roger Meier

Merge request reports