Add feature flag control builds token encryption [RUN ALL RSPEC] [RUN AS-IF-FOSS]

app/models/ci/build.rb

@@ -212,7 +212,8 @@ module Ci
 
     acts_as_taggable
 
-    add_authentication_token_field :token, encrypted: :optional
+    add_authentication_token_field :token,
+      encrypted: -> { Gitlab::Ci::Features.require_builds_token_encryption? ? :required : :optional }
 
     before_save :ensure_token
     before_destroy { unscoped_project }

config/feature_flags/development/ci_builds_tokens_required_encryption.yml

+---
+name: ci_builds_tokens_required_encryption
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/63874
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/333566
+milestone: '14.0'
+type: development
+group: group::pipeline execution
+default_enabled: false

lib/gitlab/ci/features.rb

@@ -41,6 +41,10 @@ module Gitlab
       def self.gldropdown_tags_enabled?
         ::Feature.enabled?(:gldropdown_tags, default_enabled: :yaml)
       end
+
+      def self.require_builds_token_encryption?
+        Feature.enabled?(:ci_builds_tokens_required_encryption, default_enabled: :yaml)
+      end
     end
   end
 end