Set variable expansion to default disabled
What does this MR do and why?
In !195494 (merged), we set CI/CD variables to masked by default, which is a logical safer default. But we left the expansion option enabled by default, which is a conflicting setting.
When both settings are enabled, the allowed characters in the variable values are limited. So for example, users attempting to save a masked variable with a # in it will be blocked. This gives the impression the issue is with masking, but the issue is with these incompatible settings both being enabled. The users might disable masking (a less safe option) to make the variable work, when in fact they should be disabling variable expansion.
With it default disabled, users will not be blocked from using most special characters, allowing them to use masking in more cases without needing to change settings.
| Before | After |
|---|---|
 |
 |
References
Related to !208092 (closed)
Screenshots or screen recordings
| Before | After |
|---|---|
How to set up and validate locally
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.