feat: Added ability to parse keyvalue as an azure keyvault ID

[sgettys]

Signed-off-by: Steven Gettys s.gettys@f5.com

[sgettys]

What does this change

This adds the ability for the azure key vault secrets plugin to resolve secrets when the secret keyValue is specified as the secret ID instead of just the secret name. The following behavior was added

• Given: A porter config that specifies azure.keyvault and has a key vault name defined in the config
  • When: A credential set has the source set to "secret"
  • And: The value specified in that field is a full azure key vault secret ID
    • Then: The secrets plugin will attempt to fetch that secret using the values from key vault URL, secret name, and version that is parsed from that ID

The new plugin behavior does not break backwards compatibility. It will check that the provided secret keyValue can be parsed as a secret ID. If it can then it attempts to fetch that based on the values it parsed. If it fails then it will fallback to attempting to read it as the secret name in the configured key vault. Only after it has failed both attempts to resolve the secret will the plugin fail

What issue does it fix

Closes #49

Checklist

• Did you write tests?
• Did you write documentation?
• Did you perform integration tests?

[carolynvs]

This is great. I didn't see any problems so just let me know when you'd like a full review.

[sgettys]

Tested with a mix of secret names and secret IDs in both the keyvault configured for the plugin as well as a separate keyvault that the user running porter has access to. Able to resolve all combinations of secret names and IDs.

Example porter config:

default-secrets: keyvault
secrets:
  - name: "keyvault"
    plugin: "azure.keyvault"
    config:
      vault: "test-kv-1"

Example credential set:

schemaVersion: 1.0.1
name: test-credset
credentials:
  - name: secret_one
    source:
      secret: https://test-kv-1.vault.azure.net/secrets/secret-one/abc123
  - name: secret_two
    source:
      secret: https://test-kv-2.vault.azure.net/secrets/secret-two
  - name: secret_three
    source:
      secret: secret-three
  - name: secret_four
    source:
      secret: https://test-kv-2.vault.azure.net/secrets/secret-four/abc123