Backend: Track when a predefined variable is overwritten
Summary
Users can overwrite CI_JOB_TOKEN
or JWT token, among others, which can cause issues as we've seen.
Proposal
This issue is to implement tracking to flag when a predefined variable is overwritten, it should be captured in a Kibana log (which could have an Elastic watcher trigger a message to a Slack Channel) or a Prometheus counter gets updated.
Additional details
Some relevant technical details, if applicable, such as:
- Does this need a feature flag?
- Is there an example response showing the data structure that should be returned (new endpoints only)?
- What permissions should be used?
- Is this EE or CE?
-
EE -
CE
-
- Additional comments: