Add GitLab CI/CD secrets adapter

[felixbuenemann]

Summary

Adds a secrets adapter for GitLab CI/CD project variables using the glab CLI.

• Fetches variables via glab variable list with pagination support
• Uses --from to select an environment scope (e.g. staging, production), falling back to wildcard (*) scoped variables
• Scoped variables take precedence over wildcard variables for the same key

Usage

# .kamal/secrets
SECRETS=$(kamal secrets fetch --adapter gitlab-ci --from "$KAMAL_DESTINATION" DATABASE_URL SECRET_KEY_BASE)

Test plan

• Fetch specific secrets with environment scope
• Fallback to wildcard scope when no scoped match exists
• Fetch without scope returns only wildcard-scoped variables
• Fetch all secrets (no specific keys requested)
• Pagination across multiple pages
• Error when glab variable list fails
• Error when glab CLI is not installed

[Copilot]

Pull request overview

Adds a new gitlab-ci secrets adapter that fetches GitLab CI/CD project variables via the glab CLI, supporting environment scoping (--from) with wildcard (*) fallback and pagination.

Changes:

• Added Kamal::Secrets::Adapters::GitlabCi implementation that lists variables via glab variable list and resolves scoped vs wildcard precedence.
• Added a dedicated Minitest suite covering scoped fetches, wildcard-only behavior, pagination, and failure modes.
• Updated adapter lookup to accept the gitlab-ci adapter name.

Tip

If you aren't ready for review, convert to a draft PR.
Click "Convert to draft" or run gh pr ready --undo.
Click "Ready for review" or run gh pr ready to reengage.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
lib/kamal/secrets/adapters/gitlab_ci.rb	Implements the GitLab CI/CD variables adapter using glab, including pagination and scoped resolution logic.
test/secrets/gitlab_ci_adapter_test.rb	Adds adapter tests for scoped fetch, wildcard behavior, pagination, and error cases.
lib/kamal/secrets/adapters.rb	Adds gitlab-ci name normalization to load the new adapter.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.