Function checkAndEnsureEngineSecretsForEngine

pkg/cli/engine_secrets.go:190–213

checkAndEnsureEngineSecretsForEngine is the unified entry point for checking and collecting engine secrets. It checks existing secrets in the repository and environment, and prompts for missing ones.

(config EngineSecretConfig)

// checkAndEnsureEngineSecretsForEngine is the unified entry point for checking and collecting engine secrets.
// It checks existing secrets in the repository and environment, and prompts for missing ones.
func checkAndEnsureEngineSecretsForEngine(config EngineSecretConfig) error {
	engineSecretsLog.Printf("Checking and collecting secrets for engine: %s in repo: %s", config.Engine, config.RepoSlug)

	// Get required secrets for the engine
	requirements := getSecretRequirementsForEngine(config.Engine, config.IncludeSystemSecrets, config.IncludeOptional)

	// Check each requirement
	for _, req := range requirements {
		if req.Optional {
			// For optional secrets, just check and report
			if err := checkOptionalSecret(req, config); err != nil && config.Verbose {
				fmt.Fprintln(os.Stderr, console.FormatWarningMessage(fmt.Sprintf("Optional secret %s: %v", req.Name, err)))
			}
			continue
		}

		// For required secrets, ensure they're available
		if err := ensureSecretAvailable(req, config); err != nil {
			return fmt.Errorf("failed to ensure secret %s: %w", req.Name, err)
		}
	}

	return nil
}

// ensureSecretAvailable ensures that a required secret is available.
// It checks the repository, environment, and prompts the user if needed.