Function newAzureKBManager

pkg/credentials/manager/manager.go:62–93

(conf *api.Credentials_AzureKeyVault, prefix string, r credentials.Role, l log.Logger)

}

func newAzureKBManager(conf *api.Credentials_AzureKeyVault, prefix string, r credentials.Role, l log.Logger) (*azurekv.Manager, error) {
	if err := validateConfig(conf); err != nil {
		return nil, fmt.Errorf("uncompleted configuration for Azure Key Vault: %w", err)
	}

	opts := &azurekv.NewManagerOpts{
		TenantID:     conf.GetTenantId(),
		ClientID:     conf.GetClientId(),
		ClientSecret: conf.GetClientSecret(),
		VaultURI:     conf.GetVaultUri(),
		Logger:       l,
		SecretPrefix: prefix,
		Role:         r,
	}

	m, err := azurekv.NewManager(opts)
	if err != nil {
		return nil, fmt.Errorf("configuring the secrets manager: %w", err)
	}

	if opts.Role == credentials.RoleReader {
		if err := azurekv.ValidateReaderClient(m, prefix); err != nil {
			return nil, fmt.Errorf("validating Azure KeyVault reader client: %w", err)
		}
	} else {
		if err := azurekv.ValidateWriterClient(m, prefix); err != nil {
			return nil, fmt.Errorf("validating Azure KeyVault writer client: %w", err)
		}
	}

	return m, nil
}

func newAWSCredentialsManager(conf *api.Credentials_AWSSecretManager, prefix string, r credentials.Role, l log.Logger) (*aws.Manager, error) {
	if err := validateConfig(conf); err != nil {