[ntenenz]

A pretty glaring example is this one (LDAP password stored in plaintext): https://gitlab.com/gitlab-org/gitlab-ce/issues/38066

We purchased a gitlab subscription but cannot obtain infosec approval (and thus cannot use it) due to this issue.

[sytse]

Thanks for mentioning this. I've noted your interest in the relevant issue https://gitlab.com/gitlab-org/omnibus-gitlab/issues/2183#not...

If you have not done so already please ask our support team if they have an alternative solution. I've heard of people dynamically loading secrets but I'm not sure it addresses your use case.