helmfile/pkg/tmpl/expand_secret_ref.go

package tmpl

import (
	"fmt"
	"sync"

	"github.com/helmfile/helmfile/pkg/plugins"
)

// to generate mock run mockgen -source=expand_secret_ref.go -destination=expand_secrets_mock.go -package=tmpl
type valClient interface {
	Eval(template map[string]any) (map[string]any, error)
}

var once sync.Once
var secretsClient valClient

func fetchSecretValue(path string) (string, error) {
	tmpMap := make(map[string]any)
	tmpMap["key"] = path
	resultMap, err := fetchSecretValues(tmpMap)
	if err != nil {
		return "", err
	}

	rendered, ok := resultMap["key"]
	if !ok {
		return "", fmt.Errorf("unexpected error occurred, %v doesn't have 'key' key", resultMap)
	}

	result, ok := rendered.(string)
	if !ok {
		return "", fmt.Errorf("expected %v to be string", rendered)
	}

	return result, nil
}

func fetchSecretValues(values map[string]any) (map[string]any, error) {
	var err error
	// below lines are for tests
	once.Do(func() {
		if secretsClient == nil {
			secretsClient, err = plugins.ValsInstance()
		}
	})
	if secretsClient == nil {
		return nil, err
	}

	resultMap, err := secretsClient.Eval(values)
	if err != nil {
		return nil, err
	}

	return resultMap, nil
}