Skip to content

Remove `opt_in_jwt` from the codebase

Avielle Wolfe requested to merge 366798-remove-opt-in-jwt into master

What does this MR do and why?

This MR removes the opt_in_jwt toggle from the codebase. The shared JWTs (CI_JOB_JWT, CI_JOB_JWT_V1, CI_JOB_JWT_V2) will be available in CI jobs unless they define ID tokens. The shared JWTs will be removed in %16.5.

NOTE: the original plan, as documented in #356986 (closed) has changed. We learned that customers need more time to migrate from CI_JOB_JWT to ID tokens, so instead of defaulting the field to true we will be removing it entirely. Until %16.5, the shared JWTs will be created for all CI jobs except those using ID tokens.

Docs notice for deprecation: https://docs.gitlab.com/ee/ci/secrets/id_token_authentication.html#enable-automatic-id-token-authentication-deprecated

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #366798 (closed)

Edited by Avielle Wolfe

Merge request reports