Add new GraphQL queries for IP allow lists

Adding some GraphQL queries for managing the IP allow list feature in
GitHub.com. These queries include:

- a query for getting the IP allow list configuration for an enterprise.
- a query for getting the IP allow list configuration for an
  organization.
- a query for adding an IP address to an IP allow list.
- a query for removing an IP address from an IP allow list.
- a query for enabling an IP allow list.
- a query for disabling an IP allow list.

Author: jusuchin85

graphql/queries/enterprise-get-ip-allow-list.graphql

@@ -0,0 +1,25 @@
+# Grab current IP allow list settings for an enterprise.
+# This includes:
+# - The IP allow list entries
+# - The IP allow list enabled setting
+# - The IP allow list for GitHub Apps enabled setting
+
+query GetEnterpriseIPAllowList {
+    enterprise(slug: "ENTERPRISE_SLUG") {
+        owner_id: id
+        enterprise_slug: slug
+        enterprise_owner_info: ownerInfo {
+            is_ip_allow_list_enabled: ipAllowListEnabledSetting
+            is_ip_allow_list_for_github_apps_enabled: ipAllowListForInstalledAppsEnabledSetting
+            ipAllowListEntries(first: 100) {
+                nodes {
+                    ip_allow_list_entry_id: id
+                    ip_allow_list_entry_name: name
+                    ip_allow_list_entry_value: allowListValue
+                    ip_allow_list_entry_created: createdAt
+                    is_ip_allow_list_entry_active: isActive
+                }
+            }
+        }
+    }
+}

graphql/queries/ip-allow-list-add-ip.graphql

@@ -0,0 +1,31 @@
+# This query is used to add an IP address to the IP allow list.
+# This can be used on both organizations and enterprise accounts.
+#
+# The `OWNER_ID` is the ID of the organization or enterprise account. You can
+# get the ID of an organization or enterprise account by executing either of
+# the following queries and referring to the value from `owner_id` field:
+#
+# - organizations: https://github.com/github/platform-samples/blob/master/graphql/queries/org-get-ip-allow-list.graphql
+# - enterprise accounts: https://github.com/github/platform-samples/blob/master/graphql/queries/enterprise-get-ip-allow-list.graphql
+
+mutation AddIPAddressToIPAllowList {
+    createIpAllowListEntry(
+        input: {
+            clientMutationId: "true"
+            ownerId: "OWNER_ID"
+            name: "DESCRIPTION_OF_IP_ADDRESS"
+            allowListValue: "IP_ADDRESS"
+            isActive: true
+        }
+    ) {
+        clientMutationId
+        ipAllowListEntry {
+            ip_allow_list_entry_id: id
+            ip_allow_list_entry_name: name
+            ip_allow_list_entry_ip_address: allowListValue
+            ip_allow_list_entry_created: createdAt
+            ip_allow_list_entry_updated: updatedAt
+            is_ip_allow_list_entry_active: isActive
+        }
+    }
+}

graphql/queries/ip-allow-list-disable.graphql

@@ -0,0 +1,21 @@
+# This query is used to disable the IP allow list feature.
+# This can be used on both organizations and enterprise accounts.
+#
+# The `OWNER_ID` is the ID of the organization or enterprise account. You can
+# get the ID of an organization or enterprise account by executing either of
+# the following queries and referring to the value from `owner_id` field:
+#
+# - organizations: https://github.com/github/platform-samples/blob/master/graphql/queries/org-get-ip-allow-list.graphql
+# - enterprise accounts: https://github.com/github/platform-samples/blob/master/graphql/queries/enterprise-get-ip-allow-list.graphql
+
+mutation EnableIPAllowList {
+    updateIpAllowListEnabledSetting(
+        input: {
+            clientMutationId: "true"
+            ownerId: "OWNER_ID"
+            settingValue: DISABLED
+        }
+    ) {
+        clientMutationId
+    }
+}

graphql/queries/ip-allow-list-enable.graphql

@@ -0,0 +1,21 @@
+# This query is used to enable the IP allow list feature.
+# This can be used on both organizations and enterprise accounts.
+#
+# The `OWNER_ID` is the ID of the organization or enterprise account. You can
+# get the ID of an organization or enterprise account by executing either of
+# the following queries and referring to the value from `owner_id` field:
+#
+# - organizations: https://github.com/github/platform-samples/blob/master/graphql/queries/org-get-ip-allow-list.graphql
+# - enterprise accounts: https://github.com/github/platform-samples/blob/master/graphql/queries/enterprise-get-ip-allow-list.graphql
+
+mutation EnableIPAllowList {
+    updateIpAllowListEnabledSetting(
+        input: {
+            clientMutationId: "true"
+            ownerId: "OWNER_ID"
+            settingValue: ENABLED
+        }
+    ) {
+        clientMutationId
+    }
+}

graphql/queries/ip-allow-list-remove-ip-entry.graphql

@@ -0,0 +1,17 @@
+# This query is used to remove an IP allow list entry from the IP allow list.
+# This can be used on both organizations and enterprise accounts.
+#
+# The `IP_ENTRY_ID` is the ID of the IP allow list entry. You can
+# get the ID for this by executing either of the following queries
+# and referring to the value from `ip_allow_list_entry_id` field:
+#
+# - organizations: https://github.com/github/platform-samples/blob/master/graphql/queries/org-get-ip-allow-list.graphql
+# - enterprise accounts: https://github.com/github/platform-samples/blob/master/graphql/queries/enterprise-get-ip-allow-list.graphql
+
+mutation DeleteIPAddressFromIPAllowList {
+    deleteIpAllowListEntry(
+        input: { clientMutationId: "true", ipAllowListEntryId: "IP_ENTRY_ID" }
+    ) {
+        clientMutationId
+    }
+}

graphql/queries/org-get-ip-allow-list.graphql

@@ -0,0 +1,24 @@
+# Grab current IP allow list settings for an organization.
+# This includes:
+# - The IP allow list entries
+# - The IP allow list enabled setting
+# - The IP allow list for GitHub Apps enabled setting
+
+query GetOrganizationIPAllowList {
+    organization(login: "ORGANIZATION_SLUG") {
+        owner_id: id
+        organization_slug: login
+        is_ip_allow_list_enabled: ipAllowListEnabledSetting
+        is_ip_allow_list_for_github_apps_enabled: ipAllowListForInstalledAppsEnabledSetting
+        ipAllowListEntries(first: 100) {
+            totalCount
+            nodes {
+                ip_allow_list_entry_id: id
+                ip_allow_list_entry_name: name
+                ip_allow_list_entry_ip_address: allowListValue
+                ip_allow_list_entry_created: createdAt
+                is_ip_allow_list_entry_active: isActive
+            }
+        }
+    }
+}