GitLab Secrets Storage POC - OLD
This [POC](https://about.gitlab.com/handbook/engineering/development/ops/release/poc.html) for GitLab Secrets Storage is our first **technical prototype** of a native GitLab secrets solution. Goal: 1. Simplicity 2. Support for static secrets only 3. Basic functionality (enough to understand feasibility) This will not be: 1. Feature rich 2. Scalable (we will focus on having a POC for a small group of users for feedback; we will address scalability later) 3. A commitment for our MVC secrets manager The minimal set of tasks for our POC are: - Be able to access secret storage - User can create a secret - User is able to access the secret when running a pipeline or job Bonus features (time permitting / future iterations): - User can assign access to secret(s) ### Progress <!-- GENERATED BY HEADWAY PROGRESS REPORT DO NOT EDIT --> <details><summary>Issues (total: 5)</summary> <details><summary>16.3 (1)</summary> | :checkered_flag: | Iteration | References | Status / ETA | DRI | Impact | | --- | --- | --- | --- | --- | --- | | :x: | gitlab-org/gitlab#415939+ | gitlab-org/gitlab#415939 | %16.3 | | | </details> <details><summary>16.4 (2)</summary> | :checkered_flag: | Iteration | References | Status / ETA | DRI | Impact | | --- | --- | --- | --- | --- | --- | | :x: | gitlab-org/gitlab#415940+ | gitlab-org/gitlab#415940 | %16.4 | | | | :x: | gitlab-org/gitlab#415937+ | gitlab-org/gitlab#415937 | %16.4 | | | </details> <details><summary>16.5 (2)</summary> | :checkered_flag: | Iteration | References | Status / ETA | DRI | Impact | | --- | --- | --- | --- | --- | --- | | :x: | gitlab-org/gitlab#415941+ | gitlab-org/gitlab#415941 | %16.5 | | | | :x: | gitlab-org/gitlab#415938+ | gitlab-org/gitlab#415938 | %16.5 | | | </details> </details> <small> Use epic gitlab-org&10691 on issues to add them to this list.<br> Generated at <code>2025-10-03 15:05:06 UTC</code> by https://gitlab.com/gitlab-org/ci-cd/ops-eng-managers/headway/-/jobs/11592864832. </small> <!-- GENERATED BY HEADWAY PROGRESS REPORT DO NOT EDIT -->
epic