Cells support for Secrets Manager
## Executive Summary GitLab Secrets Manager needs to support Cell in Q3. Related: https://gitlab.com/groups/gitlab-com/gl-infra/-/work_items/1871+ See discussion in https://gitlab.com/groups/gitlab-org/-/epics/10723#note_2658370862 <details> <summary>Overview of OpenBao deployments for Cell support</summary> ![Secret_Management](/uploads/71c2c9c5e28c042655c581f03652a4c6/Secret_Management.png){width=764 height=600} </details> #### Engineering Assessment [Brief description of the engineering assessment of this candidate item.] #### Dependencies Review and list dependencies: - [ ] Team dependencies: - Tenant Scale : Organizations - Geo? - [ ] Epic/Issue dependencies - https://gitlab.com/groups/gitlab-org/-/epics/10723+ - [ ] External dependencies: #### DRIs - **PM**: @jrandazzo - **EM**: @mmishaev - **UX/PDM**: N/A - **Group(s)**: Pipeline Security - **Engineering Owner**: [Stage level EM] #### Initiative Driver - Product or Engineering? - [ ] **Product-driven initiatives (P1/P2/P3)** - Customer-facing features or improvements driven by Product teams that require engineering resources and commitment - These initiatives require a Product Priority label (P1/P2/P3) - They may also receive GTM tier labels (T1/T2/T3) for external communication - [x] **Engineering-driven initiatives (E1/E2/E3)** - Internal technical improvements that may not have customer-facing components - These initiatives require an Engineering Priority label (E1/E2/E3) - They have internal visibility only and are not externally communicated - Examples include: technical debt reduction, infrastructure improvements, refactoring, dependency upgrades #### Sizing and Funding (Optional) - **Size**: [XS/S/M/L/XL] - **Funding Status**: [Funded/Partially funded/Not funded] --- ### Hygiene Guidelines :bulb: _See additional details about this process at https://handbook.gitlab.com/handbook/product-development/r-and-d-interlock/ ##### :one: Pre-Interlock - [x] Update epic description with all relevant information - [ ] Ensure all dependencies are identified - [x] Apply appropriate labels (see below) - [ ] Apply target delivery Milestone - [ ] Update interlock status as discussions progress (via label) ##### :two: Post-Interlock: once quarter begins - Update health status weekly (via label) - Document any newly identified risks or dependencies - Link to implementation epics/issues as work begins - Flag any scope or timeline changes immediately <!-- Apply appropriate labels: - [ ] Section (section::dev, section::ops, section::sec) - [ ] Stage (devops::plan, devops::create, devops::verify, etc.) - [ ] Group (group::product planning, group::project management, etc.) - [ ] Interlock Priority (Product labels = Interlock Priority::P1, Interlock Priority::P2, Interlock Priority::P3, Engineering labels = Interlock Priority::E1, Interlock Priority::E2, Interlock Priority::E3) - [ ] Investment theme (Investment theme::Core-Devops, Investment theme::Security-Compliance, Investment theme::AI across SDLC) - [ ] Platforms (platform: GitLab.com, platform: dedicated, platform: dedicated for gov, platform: self-managed) - [ ] Subscription tier (GitLab Ultimate, GitLab Premium, GitLab Free) - [ ] Quarter (FY27 Q1, FY27 Q2, FY27 Q3, FY27 Q4) - [ ] Pre-interlock status label (interlock status::New/Proposal in progress, interlock status::cancelled, etc) - [ ] Post-interlock status label (R&D roadmap status::Executing, R&D roadmap status::Completed) - [ ] Post-interlock, once quarter begins update health weekly (health::on track, health::needs attention, health::at risk) *For guidance on labels, see the [labels guide here](https://handbook.gitlab.com/handbook/product-development/r-and-d-interlock/#labels-guide) -->
epic