logoalt Hacker News

eglintondusttoday at 12:27 PM1 replyview on HN

You just don't inject the real secret unless hostname/whatever rule matches the request, right? I don't know if that's how this works but it's my assumption.


Replies

mikesir87today at 3:20 PM

On the Docker DevRel team... yes! This is it. The secret is injected only into headers in which the hostname matches.

There's also an ability to create kits where you can setup credential injection into other services as well.