Credential injection at the edge
The real token is attached after the request leaves the container — the agent never holds it.
WhereConsoleCLITerraform
Introduced Jun 3, 2026
How it works
Attached after the container.
A matching request gets its header at the gateway — a literal value, a secret reference, or a bearer token built from a secret.
Resolved at request time.
Rotating the secret never touches the rule.
Out of prompt injection's reach.
The credential is not in the environment, not on the filesystem, not in the model's context — the agent cannot leak what it never held.
See it on your own cluster.
Thirty minutes, your infrastructure, your stack. Or skip the call — it is one Helm release onto a cluster you already run.