count.go

// SPDX-License-Identifier: Apache-2.0

package vault

import (
	"context"
	"fmt"
	"strings"

	"github.com/hashicorp/vault/api"
	"github.com/sirupsen/logrus"

	"github.com/go-vela/server/constants"
)

// Count counts a list of secrets.
func (c *client) Count(ctx context.Context, sType, org, name string, _ []string) (i int64, err error) {
	// create log fields from secret metadata
	fields := logrus.Fields{
		"org":  org,
		"repo": name,
		"type": sType,
	}

	// check if secret is a shared secret
	if strings.EqualFold(sType, constants.SecretShared) {
		// update log fields from secret metadata
		fields = logrus.Fields{
			"org":  org,
			"team": name,
			"type": sType,
		}
	}

	c.Logger.WithFields(fields).Tracef("counting vault %s secrets for %s/%s", sType, org, name)

	vault := new(api.Secret)
	count := 0

	// capture the list of secrets from the Vault service
	switch sType {
	case constants.SecretOrg:
		vault, err = c.listOrg(org)
	case constants.SecretRepo:
		vault, err = c.listRepo(org, name)
	case constants.SecretShared:
		vault, err = c.listShared(org, name)
	default:
		return 0, fmt.Errorf("invalid secret type: %v", sType)
	}

	if err != nil {
		return 0, err
	}

	// cast the list of secrets to the expected type
	keys, ok := vault.Data["keys"].([]interface{})
	if !ok {
		return 0, fmt.Errorf("not a valid list of secrets from Vault")
	}

	// iterate through each element in the list of secrets
	for _, element := range keys {
		// cast the secret to the expected type
		_, ok := element.(string)
		if !ok {
			return 0, fmt.Errorf("not a valid list of secrets from Vault")
		}

		count++
	}

	return int64(count), nil
}