cloudfoundry / docs-dev-guide

Documentation for application developers who want to deploy their applications to Cloud Foundry
Apache License 2.0
39 stars 217 forks source link

Do not use env vars for credentials #454

Closed stephanme closed 2 years ago

stephanme commented 2 years ago

Add a note to use user-provided service instances instead. User-provided env vars show up in cf cli (manifest diff) and CC logs.

Removed the sentence to use manifest variables to hide security sensitive values. They are printed by cf cli v8 (manifest diff) and the only real use case would be env vars.

cf-gitbot commented 2 years ago

We have created an issue in Pivotal Tracker to manage this. Unfortunately, the Pivotal Tracker project is private so you may be unable to view the contents of the story.

The labels on this github issue will be updated when the story is started.

stephanme commented 2 years ago

@MerricdeLauney and @sethboyles: FYI as discussed in capi open office hour on 13.4.