An Agent may reference Secrets/ConfigMaps (envFrom-style) that the controller injects into run pods as env vars — the documented pattern for "my agent needs an API token" without putting the value in a param or a prompt. Scope fence for dev preview: CRD-level only. No UI surface, no Hub-credential integration, and secrets are never rendered into prompts.
Done when:
- An Agent-referenced Secret appears as env on the run pod in E2E, and the pattern is documented.
Depends on: none.
An Agent may reference Secrets/ConfigMaps (
envFrom-style) that the controller injects into run pods as env vars — the documented pattern for "my agent needs an API token" without putting the value in a param or a prompt. Scope fence for dev preview: CRD-level only. No UI surface, no Hub-credential integration, and secrets are never rendered into prompts.Done when:
Depends on: none.