Function checkProtectedNamespace

src/utils/protectedNamespace.js:44–69

()

}

export function checkProtectedNamespace() {
  // Homespace is explicitly treated as unprotected.
  if (isEnvTruthy(process.env.COO_RUNNING_ON_HOMESPACE)) {
    return false
  }

  const cooSignalPresent = hasAnyCooSignal()
  const k8sSignal = getKubernetesNamespaceSignal()
  const hasAnySignals = cooSignalPresent || k8sSignal.hasSignal

  // No COO/Kubernetes signals at all => local/laptop style env (unprotected).
  if (!hasAnySignals) {
    return false
  }

  const namespace = getConfiguredNamespace() ?? k8sSignal.namespace
  if (
    namespace !== null &&
    OPEN_NAMESPACE_ALLOWLIST.has(namespace.toLowerCase())
  ) {
    return false
  }

  // Conservative fallback for all other signaled environments.
  return true
}