Draft: Run every e2e suite with the Secrets Manager license

What does this MR do?

Test only. Do not merge.

This MR is a test vehicle for verifying that the shared QA_EE_LICENSE works across every end-to-end suite after it was rotated to a license that carries the secrets_manager add-on (see https://gitlab.com/gitlab-org/gitlab/-/work_items/628661#note_3835761559).

History

1. The first iteration set QA_EE_LICENSE: $QA_EE_LICENSE_SECRETS_MANAGER on .e2e-trigger-base in .gitlab/ci/qa.gitlab-ci.yml so every e2e child pipeline (omnibus, GDK, CNG) ran against the candidate license before rotating the shared one. Trigger job variables become pipeline variables in the child pipeline and outrank project-level CI variables, so this covered every job without touching them individually. All suites passed except https://gitlab.com/gitlab-org/gitlab/-/jobs/16490411626, which was expected to pass only once the official variable was updated.
2. The shared QA_EE_LICENSE project variable has since been rotated to the new license. The override was removed in e2fab157, so the branch now has no CI changes relative to master. New pipelines on this MR exercise the rotated QA_EE_LICENSE directly.

The pipeline:run-all-e2e label is applied so the full suites run instead of the selective subset a merge request normally gets.

How to read the results

• Compare failures against a recent master full e2e run to separate flakes from regressions caused by the license.
• Pay attention to the 11_fulfillment specs, which assert on license and subscription details.
• Run the pipeline at least twice before drawing conclusions.
• Keep in mind that QA_EE_LICENSE is also used outside this project (for example the CustomersDot e2e jobs). This MR does not cover those.

Related issues

• https://gitlab.com/gitlab-org/gitlab/-/work_items/628661
• Previous MR that introduced the fallback for cng-secrets-manager: !255043 (merged)

Checklist

Pre-merge

Not applicable. This MR is a test vehicle and is not meant to be merged.

• Different pipeline types: not applicable
• Non-canonical projects: not applicable
  • gitlab-foss
  • security
  • dev
  • personal forks
• Pipeline performance: the pipeline:run-all-e2e label makes this MR pipeline expensive on purpose

If new jobs are added: no new jobs are added.

Post-merge

• Not applicable, the MR will be closed once the results are in.