Decouple `ci_secure_files_path` in `SourceContext`

gems/gitlab-backup-cli/lib/gitlab/backup/cli/source_context.rb

@@ -11,6 +11,7 @@ class SourceContext
         # Defaults defined in `config/initializers/1_settings.rb`
         DEFAULT_CI_BUILDS_PATH = 'builds/'
         DEFAULT_JOBS_ARTIFACTS_PATH = 'artifacts/'
+        DEFAULT_SECURE_FILES_PATH = 'ci_secure_files/'
 
         def gitlab_version
           File.read(gitlab_basepath.join("VERSION")).strip.freeze
@@ -40,8 +41,10 @@ def ci_job_artifacts_path
 
         # CI Secure Files basepath
         def ci_secure_files_path
-          # TODO: Use configuration solver
-          Settings.ci_secure_files.storage_path
+          path = gitlab_config.dig(env, 'ci_secure_files', 'storage_path') ||
+            gitlab_shared_path.join(DEFAULT_SECURE_FILES_PATH)
+
+          absolute_path(path)
         end
 
         # CI LFS basepath

gems/gitlab-backup-cli/spec/fixtures/gitlab.yml

@@ -76,7 +76,7 @@ test:
 
   ci_secure_files:
     enabled: true
-    storage_path: tmp/tests/ci_secure_files
+    storage_path: /tmp/gitlab/full/ci_secure_files
     object_store:
       enabled: false
       remote_directory: ci-secure-files

gems/gitlab-backup-cli/spec/gitlab/backup/cli/source_context_spec.rb

@@ -95,6 +95,32 @@
     end
   end
 
+  describe '#ci_secure_files_path' do
+    context 'with a missing configuration value' do
+      it 'returns the default value in full path' do
+        use_gitlab_config_fixture('gitlab-missingconfigs.yml')
+
+        expect(context.ci_secure_files_path).to eq(fake_gitlab_basepath.join('test-shared/ci_secure_files'))
+      end
+    end
+
+    context 'with a relative path configured in gitlab.yml' do
+      it 'returns a full path based on gitlab basepath' do
+        use_gitlab_config_fixture('gitlab-relativepaths.yml')
+
+        expect(context.ci_secure_files_path).to eq(fake_gitlab_basepath.join('tmp/tests/ci_secure_files'))
+      end
+    end
+
+    context 'with a full path configured in gitlab.yml' do
+      it 'returns a full path as configured in gitlab.yml' do
+        use_gitlab_config_fixture('gitlab.yml')
+
+        expect(context.ci_secure_files_path).to eq(Pathname('/tmp/gitlab/full/ci_secure_files'))
+      end
+    end
+  end
+
   describe '#gitlab_shared_path' do
     context 'with shared path not configured in gitlab.yml' do
       it 'raises an error' do