I work for a company in wich we have a typical java ci-cd environment (jenkins, nexus, sonar, gitlab...).
We are authenticating against an ldap so I can manage user and roles pretty easily giving user membership of groups. In gitlab users have "Regular" access level and some groups have "Admin" level. With this schema everyone can see the projects they belong to and the internal projects (shared with any logged in user).
We never needed to provide access for any external users but recently we added a consultant to the staff and I don't want him to see our internal projects, so how can I share with him a project without also leaking all of our internal stuff?