devcontainers / devcontainers/cli

Secrets for containerEnv

Abierto
#772 2 comentarios 0 reacciones 0 asignados Ver en GitHub
feature-request
Lenguaje dominante
TypeScript
Estrellas
3k
Forks
457
Merge medio
13 h 17 min
PR fusionados (30 d)
6

Descripción

Currently the --secrets-file sets the secret environment variables as `remoteEnv` which are only accessible by the vscode server process. A support for setting secrets as `containerEnv` shall ensure that all the running processes inside the devcontainer can access them.

At present, if I want to pass secrets at runtime I would have to pass them in `containerEnv` in `devcontainer.json` file, which is insecure as they are committed to the git repository. As a workaround, I make a docker compose file and pass the `env_file` there and use it for spinning up the devcontainer.

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.