credentials.go

package runner

import (
	"fmt"
	"os"
	"strings"
)

// parseCredentialOverrides parses a string of credential overrides that the user provided as a command line arg.
// The format of credential overrides can be one of two things:
// cred1:ENV1,ENV2 (direct mapping of environment variables)
// cred1:ENV1=VALUE1,ENV2=VALUE2 (key-value pairs)
//
// This function turns it into a map[string]map[string]string like this:
//
//	{
//	  "cred1": {
//	    "ENV1": "VALUE1",
//	    "ENV2": "VALUE2",
//	  }
//	}
func parseCredentialOverrides(overrides []string) (map[string]map[string]string, error) {
	credentialOverrides := make(map[string]map[string]string)

	for _, o := range overrides {
		credName, envs, found := strings.Cut(o, ":")
		if !found {
			return nil, fmt.Errorf("invalid credential override: %s", o)
		}
		envMap := make(map[string]string)
		for _, env := range strings.Split(envs, ",") {
			key, value, found := strings.Cut(env, "=")
			if !found {
				// User just passed an env var name as the key, so look up the value.
				value = os.Getenv(key)
			}
			envMap[key] = value
		}
		credentialOverrides[credName] = envMap
	}

	return credentialOverrides, nil
}