Currently, workspace admins need to allowlist Bitbucket pipelines IPs in the access controls to perform git clone operations or to perform git submodule updates from a Bitbucket pipeline step for the Bitbucket git URLs, with workspace under access controls.

There should be an option for workspace admins to check/uncheck "Allowlist Bitbucket Pipeline IPs" instead of manually adding each IP range of Bitbucket pipelines.