When enabled, space developers can do a get on the /v2/apps/:guid/env and /v3/apps/:guid/env end points. When disabled, space developers can no longer do a get against these end points.
GET /v2/config/feature_flags/space_developer_env_var_visibility
Authorization: bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoidWFhLWlkLTMwNiIsImVtYWlsIjoiZW1haWwtMjEzQHNvbWVkb21haW4uY29tIiwic2NvcGUiOlsiY2xvdWRfY29udHJvbGxlci5hZG1pbiJdLCJhdWQiOlsiY2xvdWRfY29udHJvbGxlciJdLCJleHAiOjE0NTg4NTU2ODJ9.Csd5GAmQmNcw1WrThJY7WdtVzuGCLf01ZubdVOnUUM8 Host: example.org Cookie:
curl "https://api.[your-domain.com]/v2/config/feature_flags/space_developer_env_var_visibility" -X GET \ -H "Authorization: bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoidWFhLWlkLTMwNiIsImVtYWlsIjoiZW1haWwtMjEzQHNvbWVkb21haW4uY29tIiwic2NvcGUiOlsiY2xvdWRfY29udHJvbGxlci5hZG1pbiJdLCJhdWQiOlsiY2xvdWRfY29udHJvbGxlciJdLCJleHAiOjE0NTg4NTU2ODJ9.Csd5GAmQmNcw1WrThJY7WdtVzuGCLf01ZubdVOnUUM8" \ -H "Host: example.org" \ -H "Cookie: "
200 OK
{ "name": "space_developer_env_var_visibility", "enabled": true, "error_message": null, "url": "/v2/config/feature_flags/space_developer_env_var_visibility" }
Content-Type: application/json;charset=utf-8 X-VCAP-Request-ID: Content-Length: 166 X-Content-Type-Options: nosniff