Add per-user daily rate limit on project and group creation

What does this MR do and why?

  • Add per-user daily rate limit of 200/day on project and group creation to prevent abusive behaviour.

Screenshots or recordings

Groups API

Screenshot_2026-07-15_at_1.14.13_pm

Projects API

Screenshot_2026-07-15_at_1.14.21_pm

Steps to reproduce

  1. Enable the feature flag
Feature.enable(:namespace_create_rate_limit)
  1. Configure the rate limits by navigating to Admin > Settings > Network > Projects API rate limits. Update the value to 2 for now.

  2. Restart GDK

  3. Try to create multiple projects either using the UI or the API:

curl --request POST \
  --header "PRIVATE-TOKEN: <your_token>" \
  --header "Content-Type: application/json" \
  --data '{"name": "Test <X>"}' \
  "<GDK>/api/v4/projects"

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Resolves #601717 (comment 3550482742)

Edited by Hinam Mehra

Merge request reports

Loading