You just don't inject the real secret unless hostname/whatever rule matches the ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

eglintondust 34 days ago | parent | context | favorite | on: Docker Sandboxes – Disposable, isolated sandboxes ...

You just don't inject the real secret unless hostname/whatever rule matches the request, right? I don't know if that's how this works but it's my assumption.

mikesir87 33 days ago [–]

On the Docker DevRel team... yes! This is it. The secret is injected only into headers in which the hostname matches.

There's also an ability to create kits where you can setup credential injection into other services as well.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact