we do validation just not in controller but in model. See src/app/models/glue/pulp/repo.rb lines 19-23
this validation is added in pulp glue because repository URL is a pulp lazy attribute