microsoft / microsoft/aspire

Allow parameters to opt out of isolated user-secrets copying

Open
#19,355 1 comment 0 reactions 0 assignees View on GitHub
area-app-model triage:bot-seen
Dominant language
C#
Stars
6.3k
Forks
991
Avg merge
2d 15h
Merged PRs (30d)
196

Description

### Is your feature request related to a problem? Please describe the problem.

`aspire run --isolated` copies the AppHost user secrets into an isolated user-secrets store. Some parameter values should not be copied, such as credentials or tokens that must be unique to each instance. Today there is no way for an AppHost author to identify those parameters, so the isolated instance inherits values that should be supplied or generated independently.

### Describe the solution you'd like

Add a way to mark a parameter as not copyable to an isolated user-secrets store. When isolated mode creates its user-secrets copy, the value associated with that parameter should be omitted. The isolated instance should then resolve the parameter through the normal missing-value flow instead of receiving the original value.

### Additional context

I searched the existing issues and did not find one covering a per-parameter opt-out from isolated user-secrets copying.

Contributor guide

Open the contributing guide

Research direction

Locate the implementation of `aspire run --isolated` and the code that copies AppHost user secrets into the isolated store. Trace how parameter values are written and how missing values are resolved, then confirm that an opted-out parameter is omitted and follows the normal missing-value flow.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
cli, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.