New storage setting for Secure Files

The DevOps for Mobile Apps Incubation Engineering SEG is developing a new feature called Secure File to be able to support binary configuration files in CI pipelines. The feature proposal discussion is here. This feature adds a new storage setting.

gitlab-org/gitlab!77886 (merged) adds the uploader that uses this new storage setting, and gitlab-org/gitlab!78227 (merged) adds the API. There is a recorded walkthrough of the feature as well https://youtu.be/eK3FUskHfdo

Below is a list of distribution and infrastructure-related tasks needed to complete the rollout of this feature:

Please start a readiness review - https://gitlab.com/gitlab-com/gl-infra/readiness/ for this to check other items related to this feature - primarily concerned about bucket retention policies.

• Add storage setting to Omnibus gitlab-org/omnibus-gitlab!5857 (merged)
• Add storage setting to GitLab Helm Chart gitlab-org/charts/gitlab!2437 (merged)
• Add storage setting to GDK gitlab-org/gitlab-development-kit!2380 (merged)
• Setup buckets on gstg
  • https://ops.gitlab.net/gitlab-com/gl-infra/terraform-modules/google/storage-buckets/-/merge_requests/62
  • https://ops.gitlab.net/gitlab-com/gl-infra/config-mgmt/-/merge_requests/3559
• Add bucket configuration on gstg
  • omnibus: https://gitlab.com/gitlab-com/gl-infra/chef-repo/-/merge_requests/1515
  • k8s: gitlab-com/gl-infra/k8s-workloads/gitlab-com!1611 (merged)
• Enable feature on gstg
• Setup buckets on gprd 👉 https://ops.gitlab.net/gitlab-com/gl-infra/config-mgmt/-/merge_requests/3656
• Add bucket configuration on gprd
  • omnibus: https://gitlab.com/gitlab-com/gl-infra/chef-repo/-/merge_requests/1651
  • k8s: gitlab-com/gl-infra/k8s-workloads/gitlab-com!1706 (merged)
• Enable feature on gprd