restrict user create piplines in system namespaces (#238)

Signed-off-by: Maksim Paskal <paskal.maksim@gmail.com>
maksim-paskal · Sep 10, 2024 · f6eb137 · f6eb137
1 parent 095567d
commit f6eb137
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/pkg/api/createGitlabPipeline.go b/pkg/api/createGitlabPipeline.go
@@ -73,6 +73,10 @@ func (e *Environment) CreateGitlabPipeline(ctx context.Context, input *CreateGit
 		return "", errNoGitlabClient
 	}
 
+	if e.IsSystemNamespace() {
+		return "", errors.New("can not create pipeline in system namespace")
+	}
+
 	projectIDInt, err := strconv.Atoi(input.ProjectID)
 	if err != nil {
 		return "", errors.Wrap(err, "can not convert to number")