[server] Tie protected_secrets to ConfigCag

so that we can gradually roll this out in prod
gitpod-io · Aug 1, 2022 · 91d6ced · 91d6ced
1 parent 04f122c
commit 91d6ced
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/components/server/src/workspace/workspace-starter.ts b/components/server/src/workspace/workspace-starter.ts
@@ -749,6 +749,12 @@ export class WorkspaceStarter {
                 );
             }
 
+            if (await getExperimentsClientForBackend().getValueAsync("protected_secrets", false, { user })) {
+                // We roll out the protected secrets feature using a ConfigCat feature flag, to ensure
+                // a smooth, gradual roll out without breaking users.
+                featureFlags = featureFlags.concat(["protected_secrets"]);
+            }
+
             featureFlags = featureFlags.filter((f) => !excludeFeatureFlags.includes(f));
 
             if (forcePVC === true) {