Function getSecretRequirementsForEngine

pkg/cli/engine_secrets.go:58–96

getSecretRequirementsForEngine returns all secrets needed for a specific engine. This combines engine-specific secrets with optional system-level secrets.

(engine string, includeSystemSecrets bool, includeOptional bool)

// getSecretRequirementsForEngine returns all secrets needed for a specific engine.
// This combines engine-specific secrets with optional system-level secrets.
func getSecretRequirementsForEngine(engine string, includeSystemSecrets bool, includeOptional bool) []SecretRequirement {
	engineSecretsLog.Printf("Getting required secrets for engine: %s (system=%v, optional=%v)", engine, includeSystemSecrets, includeOptional)

	var requirements []SecretRequirement

	// Add system-level secrets first if requested
	if includeSystemSecrets {
		for _, sys := range constants.SystemSecrets {
			if sys.Optional && !includeOptional {
				continue
			}
			requirements = append(requirements, SecretRequirement{
				Name:           sys.Name,
				WhenNeeded:     sys.WhenNeeded,
				Description:    sys.Description,
				Optional:       sys.Optional,
				IsEngineSecret: false,
			})
		}
	}

	// Add engine-specific secret
	opt := constants.GetEngineOption(engine)
	if opt != nil {
		requirements = append(requirements, SecretRequirement{
			Name:               opt.SecretName,
			WhenNeeded:         opt.WhenNeeded,
			Description:        getEngineSecretDescription(opt),
			Optional:           false,
			AlternativeEnvVars: opt.AlternativeSecrets,
			KeyURL:             opt.KeyURL,
			IsEngineSecret:     true,
			EngineName:         engine,
		})
	}

	engineSecretsLog.Printf("Returning %d secret requirements for engine %s", len(requirements), engine)
	return requirements
}

// getEngineSecretDescription returns a detailed description for an engine secret
func getEngineSecretDescription(opt *constants.EngineOption) string {