When enabled, space developers can do a get on the /v2/apps/:guid/env and /v3/apps/:guid/env end points. When disabled, space developers can no longer do a get against these end points.
GET /v2/config/feature_flags/space_developer_env_var_visibility
Authorization: bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoidWFhLWlkLTE5IiwiZW1haWwiOiJlbWFpbC0xOUBzb21lZG9tYWluLmNvbSIsInNjb3BlIjpbImNsb3VkX2NvbnRyb2xsZXIuYWRtaW4iXSwiYXVkIjpbImNsb3VkX2NvbnRyb2xsZXIiXSwiZXhwIjoxNDYzNjE4NzA0fQ.yEor_gHyKCYNmTutvz94wbdtKVnLZ67Lf4yb-xo2mXI Host: example.org Cookie:
curl "https://api.[your-domain.com]/v2/config/feature_flags/space_developer_env_var_visibility" -X GET \ -H "Authorization: bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoidWFhLWlkLTE5IiwiZW1haWwiOiJlbWFpbC0xOUBzb21lZG9tYWluLmNvbSIsInNjb3BlIjpbImNsb3VkX2NvbnRyb2xsZXIuYWRtaW4iXSwiYXVkIjpbImNsb3VkX2NvbnRyb2xsZXIiXSwiZXhwIjoxNDYzNjE4NzA0fQ.yEor_gHyKCYNmTutvz94wbdtKVnLZ67Lf4yb-xo2mXI" \ -H "Host: example.org" \ -H "Cookie: "
200 OK
{ "name": "space_developer_env_var_visibility", "enabled": true, "error_message": null, "url": "/v2/config/feature_flags/space_developer_env_var_visibility" }
Content-Type: application/json;charset=utf-8 X-VCAP-Request-ID: 6ff9a6cd-729f-4445-82d9-d9a39bbaa540 Content-Length: 166 X-Content-Type-Options: nosniff