mirror of
https://github.com/hanzoai/replicate.git
synced 2026-10-30 18:23:20 +00:00
zeekayandHanzo Dev
dd0f785a54
A `secrets:` block names stores and the keys read from them; every key
resolves as ${name} ahead of the environment. The read authenticates with
the projected ServiceAccount token IAM exchanges for a bearer, so a
credential reaches the process from the store that keeps it rather than
from a variable every process on the pod can see. A key the store does
not hold stops the process at parse instead of expanding to the empty
string. Configurations that name no store are unchanged.
Co-authored-by: Hanzo Dev <[email protected]>