Skip to content

Documentation for HTTPS#29466

Merged
mikenomitch merged 4 commits intoproductionfrom
gv/tls
Apr 10, 2026
Merged

Documentation for HTTPS#29466
mikenomitch merged 4 commits intoproductionfrom
gv/tls

Conversation

@gabivlj
Copy link
Copy Markdown
Contributor

@gabivlj gabivlj commented Mar 30, 2026

Summary

Screenshots (optional)

Documentation checklist

  • Is there a changelog entry (guidelines)? If you don't add one for something awesome and new (however small) — how will our customers find out? Changelogs are automatically posted to RSS feeds, the Discord, and X.
  • The change adheres to the documentation style guide.
  • If a larger change - such as adding a new page- an issue has been opened in relation to any incorrect or out of date information that this PR fixes.
  • Files which have changed name or location have been allocated redirects.

Open with Devin

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Mar 30, 2026

This pull request requires reviews from CODEOWNERS as it changes files that match the following patterns:

Pattern Owners
* @cloudflare/pcx-technical-writing
/src/content/docs/containers/ @mikenomitch, @th0m, @cloudflare/pcx-technical-writing, @cloudflare/cloudchamber
/src/content/docs/durable-objects/ @elithrar, @vy-ton, @joshthoward, @oxyjun, @lambrospetrou, @mikenomitch, @cloudflare/pcx-technical-writing
/src/content/docs/sandbox/ @whoiskatrin, @ghostwriternr, @cloudflare/pcx-technical-writing, @cloudflare/ai-agents

@gabivlj gabivlj force-pushed the gv/tls branch 2 times, most recently from ea13773 to 55b9507 Compare March 30, 2026 20:49
Copy link
Copy Markdown
Contributor

@devin-ai-integration devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 2 potential issues.

View 4 additional findings in Devin Review.

Open in Devin Review

The container calls `http://my.kv/some-key` and the outbound handler resolves it using the KV binding.
This is especially useful for agentic workloads where you cannot fully trust the code running inside the container. With this pattern:

- **No token is exposed to the container.** The secret lives in the Worker's environment and is never passed into the sandbox.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Copy-paste error: containers page references "sandbox" instead of "container"

On the containers outbound-traffic page, line 153 says "never passed into the sandbox" but this is the containers page — it should say "never passed into the container." The sandbox equivalent at src/content/docs/sandbox/guides/outbound-traffic.mdx:172 correctly uses "sandbox" throughout, confirming this is a copy-paste error.

Suggested change
- **No token is exposed to the container.** The secret lives in the Worker's environment and is never passed into the sandbox.
- **No token is exposed to the container.** The secret lives in the Worker's environment and is never passed into the container.
Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.


// Remove access once setup is complete
await container.removeOutboundByHost("my.kv");
// do something with github.com on your container...
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Mixed tab/space indentation in code block

Line 336 uses a tab character for indentation (\t// do something with github.com...) while every other indented line in the same code block (lines 330–345) uses 2-space indentation. This renders as visibly inconsistent indentation in the documentation code example.

Suggested change
// do something with github.com on your container...
// do something with github.com on your container...
Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

@mikenomitch mikenomitch enabled auto-merge (squash) April 10, 2026 17:08
@mikenomitch mikenomitch merged commit 221200e into production Apr 10, 2026
18 checks passed
@mikenomitch mikenomitch deleted the gv/tls branch April 10, 2026 18:36
nojvek pushed a commit to nojvek/cloudflare-docs that referenced this pull request Apr 29, 2026
* Documentation for HTTPS

* Structural changes, allow/deny change, sandboxes added

* Pass adjusted from docs/egress.md in container class and add interceptOutboundHttps

* Improved docs on egress handling

---------

Co-authored-by: Mike Nomitch <mnomitch@cloudflare.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants