delete.go

// SPDX-License-Identifier: Apache-2.0

package vault

import (
	"context"
	"fmt"
	"strings"

	"github.com/sirupsen/logrus"

	"github.com/go-vela/server/constants"
)

// Delete deletes a secret.
func (c *client) Delete(ctx context.Context, sType, org, name, path string) error {
	// create log fields from secret metadata
	fields := logrus.Fields{
		"org":    org,
		"repo":   name,
		"secret": path,
		"type":   sType,
	}

	// check if secret is a shared secret
	if strings.EqualFold(sType, constants.SecretShared) {
		// update log fields from secret metadata
		fields = logrus.Fields{
			"org":    org,
			"team":   name,
			"secret": path,
			"type":   sType,
		}
	}

	c.Logger.WithFields(fields).Tracef("deleting vault %s secret %s for %s/%s", sType, path, org, name)

	// delete the secret from the Vault service
	switch sType {
	case constants.SecretOrg:
		return c.deleteOrg(org, path)
	case constants.SecretRepo:
		return c.deleteRepo(org, name, path)
	case constants.SecretShared:
		return c.deleteShared(org, name, path)
	default:
		return fmt.Errorf("invalid secret type: %v", sType)
	}
}

// deleteOrg is a helper function to delete
// the org secret for the provided path.
func (c *client) deleteOrg(org, path string) error {
	return c.delete(fmt.Sprintf("%s/org/%s/%s", c.config.Prefix, org, path))
}

// deleteRepo is a helper function to delete
// the repo secret for the provided path.
func (c *client) deleteRepo(org, repo, path string) error {
	return c.delete(fmt.Sprintf("%s/repo/%s/%s/%s", c.config.Prefix, org, repo, path))
}

// deleteShared is a helper function to delete
// the shared secret for the provided path.
func (c *client) deleteShared(org, team, path string) error {
	return c.delete(fmt.Sprintf("%s/shared/%s/%s/%s", c.config.Prefix, org, team, path))
}

// delete is a helper function to delete
// the secret for the provided path.
func (c *client) delete(path string) error {
	// send API call to delete the secret
	_, err := c.Vault.Logical().Delete(path)
	if err != nil {
		return err
	}

	return nil
}