devcontainers / devcontainers/cli

Secrets for containerEnv

Ouverte
#772 2 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
feature-request
Langage dominant
TypeScript
Étoiles
3k
Forks
457
Merge moyen
13 h 17 min
PR mergées (30 j)
6

Description

Currently the --secrets-file sets the secret environment variables as `remoteEnv` which are only accessible by the vscode server process. A support for setting secrets as `containerEnv` shall ensure that all the running processes inside the devcontainer can access them.

At present, if I want to pass secrets at runtime I would have to pass them in `containerEnv` in `devcontainer.json` file, which is insecure as they are committed to the git repository. As a workaround, I make a docker compose file and pass the `env_file` there and use it for spinning up the devcontainer.

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.