regent-sdk 0.7.0

Multi-paradigm configuration management system as a library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114

use serde::de::DeserializeOwned;
#[allow(unused)]
use tracing::{debug, error, info, trace, warn};

use crate::error::RegentError;
use crate::secrets::Secret;
use crate::secrets::SecretProvidingSolution;

// https://crates.io/crates/google-cloud-secretmanager-v1

use google_cloud_secretmanager_v1::client::SecretManagerService;

#[derive(Clone)]
pub struct GcpSecretProvider {
    gcp_client: SecretManagerService,
}

impl GcpSecretProvider {
    pub async fn new() -> Result<Self, RegentError> {
        match SecretManagerService::builder().with_tracing().build().await {
            Ok(gcp_client) => Ok(GcpSecretProvider { gcp_client }),
            Err(details) => {
                error!(
                    "Failed to create a GCP Secret Manager client : {:?}",
                    details
                );
                Err(RegentError::FailedToGetSecret(format!(
                    "Failed to create a GCP Secret Manager client : {:?}",
                    details
                )))
            }
        }
    }
}

impl SecretProvidingSolution for GcpSecretProvider {
    async fn connect(&mut self) -> Result<(), RegentError> {
        match self.gcp_client.test_iam_permissions().send().await {
            Ok(_test_iam_permissions) => Ok(()),
            Err(details) => Err(RegentError::SecretsIssue(format!(
                "{}",
                details
            ))),
        }
    }

    async fn get_secret_typed<T: DeserializeOwned>(
        &self,
        secret_reference: &str, // projects/1021394879318/secrets/MY_VERY_LONG_TOKEN
    ) -> Result<Secret<T>, RegentError> {
        match self
            .gcp_client
            .access_secret_version()
            .set_name(secret_reference)
            .send()
            .await
        {
            Ok(access_secret_version_response) => match access_secret_version_response.payload {
                Some(secret_payload) => match std::str::from_utf8(&secret_payload.data) {
                    Ok(secret_data_as_str) => match serde_json::from_str::<T>(secret_data_as_str) {
                        Ok(content) => Ok(Secret::from(secret_reference, content)),
                        Err(_parse_details) => Err(RegentError::FailureToParseContent(format!(
                            "Content received from secret provider but failure to parse as {}",
                            std::any::type_name::<T>()
                        ))),
                    },
                    Err(details) => Err(RegentError::FailedToGetSecret(format!(
                        "Secret {} contains invalid UTF-8 sequence: {}",
                        secret_reference, details
                    ))),
                },
                None => Err(RegentError::FailedToGetSecret(format!(
                    "Empty secret {}: GCP API returned an AccessSecretVersionResponse with field payload = None",
                    secret_reference
                ))),
            },
            Err(details) => Err(RegentError::FailedToGetSecret(format!(
                "Failed to retrieve secret {}: {:?}",
                secret_reference, details
            ))),
        }
    }

    async fn get_secret_raw(&self, secret_reference: &str) -> Result<Secret<String>, RegentError> {
        match self
            .gcp_client
            .access_secret_version()
            .set_name(secret_reference)
            .send()
            .await
        {
            Ok(access_secret_version_response) => match access_secret_version_response.payload {
                Some(secret_payload) => match std::str::from_utf8(&secret_payload.data) {
                    Ok(secret_data_as_str) => Ok(Secret::from(
                        secret_reference,
                        secret_data_as_str.to_string(),
                    )),
                    Err(details) => Err(RegentError::FailedToGetSecret(format!(
                        "Secret {} contains invalid UTF-8 sequence: {}",
                        secret_reference, details
                    ))),
                },
                None => Err(RegentError::FailedToGetSecret(format!(
                    "Empty secret {}: GCP API returned an AccessSecretVersionResponse with field payload = None",
                    secret_reference
                ))),
            },
            Err(details) => Err(RegentError::FailedToGetSecret(format!(
                "Failed to retrieve secret {}: {:?}",
                secret_reference, details
            ))),
        }
    }
}