n8n 2.29.6 → 2.30.0

package/dist/modules/external-secrets.ee/providers/azure-key-vault/azure-key-vault.d.ts

@@ -19,4 +19,7 @@ export declare class AzureKeyVault extends SecretsProvider {
     getSecret(name: string): string;
     hasSecret(name: string): boolean;
     getSecretNames(): string[];
+    private isAzureHttpLikeError;
+    private azureErrorContext;
+    private logOperationFailure;
 }

package/dist/modules/external-secrets.ee/providers/azure-key-vault/azure-key-vault.js

@@ -34,10 +34,13 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AzureKeyVault = void 0;
+const identity_1 = require("@azure/identity");
 const backend_common_1 = require("@n8n/backend-common");
 const di_1 = require("@n8n/di");
+const ensure_error_1 = require("@n8n/utils/errors/ensure-error");
 const n8n_workflow_1 = require("n8n-workflow");
 const constants_1 = require("../../constants");
+const secrets_provider_errors_1 = require("../../errors/secrets-provider-errors");
 const types_1 = require("../../types");
 class AzureKeyVault extends types_1.SecretsProvider {
     constructor(logger = di_1.Container.get(backend_common_1.Logger)) {
@@ -97,12 +100,22 @@ class AzureKeyVault extends types_1.SecretsProvider {
         this.logger.debug('Azure Key Vault provider initialized');
     }
     async doConnect() {
-        const { vaultName, tenantId, clientId, clientSecret } = this.settings;
-        const { ClientSecretCredential } = await Promise.resolve().then(() => __importStar(require('@azure/identity')));
-        const { SecretClient } = await Promise.resolve().then(() => __importStar(require('@azure/keyvault-secrets')));
-        const credential = new ClientSecretCredential(tenantId, clientId, clientSecret);
-        this.client = new SecretClient(`https://${vaultName}.vault.azure.net/`, credential);
-        this.logger.debug('Azure Key Vault provider connected');
+        try {
+            const { vaultName, tenantId, clientId, clientSecret } = this.settings;
+            const { ClientSecretCredential } = await Promise.resolve().then(() => __importStar(require('@azure/identity')));
+            const { SecretClient } = await Promise.resolve().then(() => __importStar(require('@azure/keyvault-secrets')));
+            const credential = new ClientSecretCredential(tenantId, clientId, clientSecret);
+            this.client = new SecretClient(`https://${vaultName}.vault.azure.net/`, credential);
+            this.logger.debug('Azure Key Vault provider connected');
+        }
+        catch (error) {
+            this.logOperationFailure('Failed to connect Azure Key Vault provider', {
+                operation: 'connect',
+                error,
+                context: this.azureErrorContext(error),
+            });
+            throw error;
+        }
     }
     async test() {
         if (!this.client)
@@ -112,45 +125,95 @@ class AzureKeyVault extends types_1.SecretsProvider {
             return [true];
         }
         catch (error) {
+            this.logOperationFailure('Azure Key Vault provider test failed', {
+                operation: 'test',
+                error,
+                context: this.azureErrorContext(error),
+            });
             return [false, error instanceof Error ? error.message : 'Unknown error'];
         }
     }
     async disconnect() {
     }
     async update() {
-        const secretNames = [];
-        for await (const secret of this.client.listPropertiesOfSecrets()) {
-            if (secret.enabled === false)
-                continue;
-            secretNames.push(secret.name);
-        }
-        const promises = await Promise.allSettled(secretNames.map(async (name) => {
-            const { value } = await this.client.getSecret(name);
-            return { name, value };
-        }));
-        const updated = {};
-        const readErrors = [];
-        for (const [index, promiseResult] of promises.entries()) {
-            if (promiseResult.status === 'fulfilled') {
-                const { name, value } = promiseResult.value;
-                if (value !== undefined)
-                    updated[name] = value;
+        try {
+            const secretNames = [];
+            for await (const secret of this.client.listPropertiesOfSecrets()) {
+                if (secret.enabled === false)
+                    continue;
+                secretNames.push(secret.name);
+            }
+            const promises = await Promise.allSettled(secretNames.map(async (name) => {
+                const { value } = await this.client.getSecret(name);
+                return { name, value };
+            }));
+            const updated = {};
+            const readErrors = [];
+            const failedSecrets = [];
+            for (const [index, promiseResult] of promises.entries()) {
+                if (promiseResult.status === 'fulfilled') {
+                    const { name, value } = promiseResult.value;
+                    if (value !== undefined)
+                        updated[name] = value;
+                }
+                else {
+                    const error = (0, ensure_error_1.ensureError)(promiseResult.reason);
+                    readErrors.push(error);
+                    const secretName = secretNames[index];
+                    const errorContext = this.azureErrorContext(error);
+                    this.logger.debug(`Could not read Azure Key Vault secret "${secretName}"`, {
+                        providerName: this.name,
+                        operation: 'update',
+                        vaultName: this.settings.vaultName,
+                        secretName,
+                        ...errorContext,
+                    });
+                    failedSecrets.push({
+                        name: secretName,
+                        errorCode: errorContext.errorCode ?? 'unknown',
+                    });
+                }
+            }
+            const failureSummary = (0, secrets_provider_errors_1.buildFailureSummaryLogContext)(failedSecrets);
+            const isTotalFailure = secretNames.length > 0 && Object.keys(updated).length === 0 && readErrors.length > 0;
+            if (failureSummary && !isTotalFailure) {
+                this.logOperationFailure('Skipped unreadable Azure Key Vault secrets during update', {
+                    operation: 'update',
+                    error: readErrors[0] ?? new Error('One or more Azure Key Vault secrets could not be read'),
+                    context: {
+                        ...this.azureErrorContext(readErrors[0]),
+                        ...failureSummary,
+                    },
+                });
             }
-            else {
-                const error = (0, n8n_workflow_1.ensureError)(promiseResult.reason);
-                readErrors.push(error);
-                this.logger.warn(`Could not read Azure Key Vault secret "${secretNames[index]}"`, {
+            if (isTotalFailure) {
+                const error = readErrors[0];
+                this.logOperationFailure('Could not read any secrets from Azure Key Vault', {
+                    operation: 'update',
                     error,
+                    context: {
+                        ...this.azureErrorContext(error),
+                        ...failureSummary,
+                    },
+                });
+                throw new n8n_workflow_1.UnexpectedError('Could not read any secrets from Azure Key Vault', {
+                    cause: error,
                 });
             }
+            this.cachedSecrets = updated;
+            this.logger.debug('Azure Key Vault provider secrets updated');
         }
-        if (secretNames.length > 0 && Object.keys(updated).length === 0 && readErrors.length > 0) {
-            throw new n8n_workflow_1.UnexpectedError('Could not read any secrets from Azure Key Vault', {
-                cause: readErrors[0],
+        catch (error) {
+            if (error instanceof n8n_workflow_1.UnexpectedError) {
+                throw error;
+            }
+            this.logOperationFailure('Failed to update Azure Key Vault provider secrets', {
+                operation: 'update',
+                error,
+                context: this.azureErrorContext(error),
             });
+            throw error;
         }
-        this.cachedSecrets = updated;
-        this.logger.debug('Azure Key Vault provider secrets updated');
     }
     getSecret(name) {
         return this.cachedSecrets[name];
@@ -161,6 +224,47 @@ class AzureKeyVault extends types_1.SecretsProvider {
     getSecretNames() {
         return Object.keys(this.cachedSecrets);
     }
+    isAzureHttpLikeError(error) {
+        if (!(error instanceof Error))
+            return false;
+        const candidate = error;
+        return (error.name === 'RestError' ||
+            typeof candidate.statusCode === 'number' ||
+            typeof candidate.code === 'string');
+    }
+    azureErrorContext(error) {
+        if (error instanceof identity_1.AuthenticationError) {
+            return {
+                statusCode: error.statusCode,
+                errorCode: error.errorResponse?.error,
+            };
+        }
+        if (this.isAzureHttpLikeError(error)) {
+            return {
+                statusCode: error.statusCode,
+                errorCode: error.code,
+            };
+        }
+        if (error instanceof Error) {
+            return { errorCode: error.name };
+        }
+        return {};
+    }
+    logOperationFailure(message, params) {
+        const context = { ...params.context };
+        if (this.settings?.vaultName) {
+            context.vaultName = this.settings.vaultName;
+        }
+        (0, secrets_provider_errors_1.logSecretsProviderOperationFailure)({
+            logger: this.logger,
+            message,
+            providerName: this.name,
+            providerDisplayName: this.displayName,
+            operation: params.operation,
+            error: params.error,
+            context,
+        });
+    }
 }
 exports.AzureKeyVault = AzureKeyVault;
 //# sourceMappingURL=azure-key-vault.js.map

package/dist/modules/external-secrets.ee/providers/azure-key-vault/azure-key-vault.js.map

@@ -1 +1 @@
-{"version":3,"file":"azure-key-vault.js","sourceRoot":"","sources":["../../../../../src/modules/external-secrets.ee/providers/azure-key-vault/azure-key-vault.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wDAA6C;AAC7C,gCAAoC;AACpC,+CAAkF;AAGlF,+CAAmD;AACnD,uCAA8C;AAE9C,MAAa,aAAc,SAAQ,uBAAe;IAwDjD,YAA6B,SAAS,cAAS,CAAC,GAAG,CAAC,uBAAM,CAAC;QAC1D,KAAK,EAAE,CAAC;QADoB,WAAM,GAAN,MAAM,CAAwB;QAvD3D,SAAI,GAAG,eAAe,CAAC;QAEvB,gBAAW,GAAG,iBAAiB,CAAC;QAEhC,eAAU,GAAsB;YAC/B,4BAAgB;YAChB;gBACC,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,4CAA4C;gBAClD,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,eAAe;gBAC5B,gBAAgB,EAAE,IAAI;aACtB;YACD;gBACC,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,uDAAuD;gBAC7D,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,2CAA2C;gBACxD,gBAAgB,EAAE,IAAI;aACtB;YACD;gBACC,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,yDAAyD;gBAC/D,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,2CAA2C;gBACxD,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC/B,gBAAgB,EAAE,IAAI;aACtB;YACD;gBACC,WAAW,EAAE,eAAe;gBAC5B,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,yDAAyD;gBAC/D,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC/B,gBAAgB,EAAE,IAAI;aACtB;SACD,CAAC;QAEM,kBAAa,GAA2B,EAAE,CAAC;QAQlD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA6B;QACvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC3D,CAAC;IAES,KAAK,CAAC,SAAS;QACxB,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAEtE,MAAM,EAAE,sBAAsB,EAAE,GAAG,wDAAa,iBAAiB,GAAC,CAAC;QACnE,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,yBAAyB,GAAC,CAAC;QAGjE,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,WAAW,SAAS,mBAAmB,EAAE,UAAU,CAAC,CAAC;QAEpF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,KAAK,EAAE,sCAAsC,CAAC,CAAC;QAEzE,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC,IAAI,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC1E,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU;IAEhB,CAAC;IAED,KAAK,CAAC,MAAM;QACX,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,EAAE,CAAC;YAClE,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;gBAAE,SAAS;YACvC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CACxC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACpD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxB,CAAC,CAAC,CACF,CAAC;QAEF,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAY,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,aAAa,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAC1C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC;gBAC5C,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,GAAG,IAAA,0BAAW,EAAC,aAAa,CAAC,MAAM,CAAC,CAAC;gBAChD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE;oBACjF,KAAK;iBACL,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,8BAAe,CAAC,iDAAiD,EAAE;gBAC5E,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;aACpB,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC/D,CAAC;IAED,SAAS,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,SAAS,CAAC,IAAY;QACrB,OAAO,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,cAAc;QACb,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;CACD;AAjJD,sCAiJC"}
+{"version":3,"file":"azure-key-vault.js","sourceRoot":"","sources":["../../../../../src/modules/external-secrets.ee/providers/azure-key-vault/azure-key-vault.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8CAAsD;AAEtD,wDAA6C;AAC7C,gCAAoC;AACpC,iEAA6D;AAC7D,+CAAqE;AAGrE,+CAAmD;AACnD,kFAO8C;AAC9C,uCAA8C;AAO9C,MAAa,aAAc,SAAQ,uBAAe;IAwDjD,YAA6B,SAAS,cAAS,CAAC,GAAG,CAAC,uBAAM,CAAC;QAC1D,KAAK,EAAE,CAAC;QADoB,WAAM,GAAN,MAAM,CAAwB;QAvD3D,SAAI,GAAG,eAAe,CAAC;QAEvB,gBAAW,GAAG,iBAAiB,CAAC;QAEhC,eAAU,GAAsB;YAC/B,4BAAgB;YAChB;gBACC,WAAW,EAAE,YAAY;gBACzB,IAAI,EAAE,4CAA4C;gBAClD,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,eAAe;gBAC5B,gBAAgB,EAAE,IAAI;aACtB;YACD;gBACC,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,uDAAuD;gBAC7D,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,2CAA2C;gBACxD,gBAAgB,EAAE,IAAI;aACtB;YACD;gBACC,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,yDAAyD;gBAC/D,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,2CAA2C;gBACxD,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC/B,gBAAgB,EAAE,IAAI;aACtB;YACD;gBACC,WAAW,EAAE,eAAe;gBAC5B,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,yDAAyD;gBAC/D,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC/B,gBAAgB,EAAE,IAAI;aACtB;SACD,CAAC;QAEM,kBAAa,GAA2B,EAAE,CAAC;QAQlD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA6B;QACvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC3D,CAAC;IAES,KAAK,CAAC,SAAS;QACxB,IAAI,CAAC;YACJ,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;YAEtE,MAAM,EAAE,sBAAsB,EAAE,GAAG,wDAAa,iBAAiB,GAAC,CAAC;YACnE,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,yBAAyB,GAAC,CAAC;YAGjE,MAAM,UAAU,GAAG,IAAI,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAChF,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,WAAW,SAAS,mBAAmB,EAAE,UAAU,CAAC,CAAC;YAEpF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,mBAAmB,CAAC,4CAA4C,EAAE;gBACtE,SAAS,EAAE,SAAS;gBACpB,KAAK;gBACL,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,KAAK,EAAE,sCAAsC,CAAC,CAAC;QAEzE,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC,IAAI,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACzB,IAAI,CAAC,mBAAmB,CAAC,sCAAsC,EAAE;gBAChE,SAAS,EAAE,MAAM;gBACjB,KAAK;gBACL,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC1E,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU;IAEhB,CAAC;IAED,KAAK,CAAC,MAAM;QACX,IAAI,CAAC;YACJ,MAAM,WAAW,GAAa,EAAE,CAAC;YACjC,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,EAAE,CAAC;gBAClE,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;oBAAE,SAAS;gBACvC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CACxC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC9B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACpD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACxB,CAAC,CAAC,CACF,CAAC;YAEF,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAY,EAAE,CAAC;YAC/B,MAAM,aAAa,GAAyD,EAAE,CAAC;YAC/E,KAAK,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;gBACzD,IAAI,aAAa,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBAC1C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC;oBAC5C,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;gBAChD,CAAC;qBAAM,CAAC;oBACP,MAAM,KAAK,GAAG,IAAA,0BAAW,EAAC,aAAa,CAAC,MAAM,CAAC,CAAC;oBAChD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACvB,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;oBACtC,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;oBACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,UAAU,GAAG,EAAE;wBAC1E,YAAY,EAAE,IAAI,CAAC,IAAI;wBACvB,SAAS,EAAE,QAAQ;wBACnB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;wBAClC,UAAU;wBACV,GAAG,YAAY;qBACf,CAAC,CAAC;oBACH,aAAa,CAAC,IAAI,CAAC;wBAClB,IAAI,EAAE,UAAU;wBAChB,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,SAAS;qBAC9C,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YAED,MAAM,cAAc,GAAG,IAAA,uDAA6B,EAAC,aAAa,CAAC,CAAC;YACpE,MAAM,cAAc,GACnB,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;YAEtF,IAAI,cAAc,IAAI,CAAC,cAAc,EAAE,CAAC;gBACvC,IAAI,CAAC,mBAAmB,CAAC,0DAA0D,EAAE;oBACpF,SAAS,EAAE,QAAQ;oBACnB,KAAK,EACJ,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,uDAAuD,CAAC;oBACpF,OAAO,EAAE;wBACR,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;wBACxC,GAAG,cAAc;qBACjB;iBACD,CAAC,CAAC;YACJ,CAAC;YAED,IAAI,cAAc,EAAE,CAAC;gBACpB,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,CAAC,mBAAmB,CAAC,iDAAiD,EAAE;oBAC3E,SAAS,EAAE,QAAQ;oBACnB,KAAK;oBACL,OAAO,EAAE;wBACR,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;wBAChC,GAAG,cAAc;qBACjB;iBACD,CAAC,CAAC;gBACH,MAAM,IAAI,8BAAe,CAAC,iDAAiD,EAAE;oBAC5E,KAAK,EAAE,KAAK;iBACZ,CAAC,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,8BAAe,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACb,CAAC;YAED,IAAI,CAAC,mBAAmB,CAAC,mDAAmD,EAAE;gBAC7E,SAAS,EAAE,QAAQ;gBACnB,KAAK;gBACL,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,SAAS,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,SAAS,CAAC,IAAY;QACrB,OAAO,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,cAAc;QACb,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAEO,oBAAoB,CAAC,KAAc;QAC1C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE5C,MAAM,SAAS,GAAG,KAA2B,CAAC;QAC9C,OAAO,CACN,KAAK,CAAC,IAAI,KAAK,WAAW;YAC1B,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ;YACxC,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAClC,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,KAAc;QACvC,IAAI,KAAK,YAAY,8BAAmB,EAAE,CAAC;YAC1C,OAAO;gBACN,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK;aACrC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO;gBACN,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,KAAK,CAAC,IAAI;aACrB,CAAC;QACH,CAAC;QAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC5B,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,EAAE,CAAC;IACX,CAAC;IAEO,mBAAmB,CAC1B,OAAe,EACf,MAA6C;QAE7C,MAAM,OAAO,GAAe,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC7C,CAAC;QAED,IAAA,4DAAkC,EAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO;YACP,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,mBAAmB,EAAE,IAAI,CAAC,WAAW;YACrC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO;SACP,CAAC,CAAC;IACJ,CAAC;CACD;AArQD,sCAqQC"}

package/dist/modules/external-secrets.ee/providers/gcp-secrets-manager/gcp-secrets-manager.d.ts

@@ -20,4 +20,6 @@ export declare class GcpSecretsManager extends SecretsProvider {
     hasSecret(name: string): boolean;
     getSecretNames(): string[];
     private parseSecretAccountKey;
+    private getGcpErrorCode;
+    private logOperationFailure;
 }

package/dist/modules/external-secrets.ee/providers/gcp-secrets-manager/gcp-secrets-manager.js

@@ -38,6 +38,7 @@ const backend_common_1 = require("@n8n/backend-common");
 const di_1 = require("@n8n/di");
 const n8n_workflow_1 = require("n8n-workflow");
 const constants_1 = require("../../constants");
+const secrets_provider_errors_1 = require("../../errors/secrets-provider-errors");
 const types_1 = require("../../types");
 class GcpSecretsManager extends types_1.SecretsProvider {
     constructor(logger = di_1.Container.get(backend_common_1.Logger)) {
@@ -63,16 +64,34 @@ class GcpSecretsManager extends types_1.SecretsProvider {
         this.logger = this.logger.scoped('external-secrets');
     }
     async init(context) {
-        this.settings = this.parseSecretAccountKey(context.settings.serviceAccountKey);
+        try {
+            this.settings = this.parseSecretAccountKey(context.settings.serviceAccountKey);
+        }
+        catch (error) {
+            this.logOperationFailure('Failed to initialize GCP Secrets Manager provider', {
+                operation: 'initialize',
+                error,
+            });
+            throw error;
+        }
     }
     async doConnect() {
-        const { projectId, privateKey, clientEmail } = this.settings;
-        const { SecretManagerServiceClient: GcpClient } = await Promise.resolve().then(() => __importStar(require('@google-cloud/secret-manager')));
-        this.client = new GcpClient({
-            credentials: { client_email: clientEmail, private_key: privateKey },
-            projectId,
-        });
-        this.logger.debug('GCP Secrets Manager provider connected');
+        try {
+            const { projectId, privateKey, clientEmail } = this.settings;
+            const { SecretManagerServiceClient: GcpClient } = await Promise.resolve().then(() => __importStar(require('@google-cloud/secret-manager')));
+            this.client = new GcpClient({
+                credentials: { client_email: clientEmail, private_key: privateKey },
+                projectId,
+            });
+            this.logger.debug('GCP Secrets Manager provider connected');
+        }
+        catch (error) {
+            this.logOperationFailure('Failed to connect GCP Secrets Manager provider', {
+                operation: 'connect',
+                error,
+            });
+            throw error;
+        }
     }
     async test() {
         if (!this.client)
@@ -82,59 +101,95 @@ class GcpSecretsManager extends types_1.SecretsProvider {
             return [true];
         }
         catch (error) {
+            this.logOperationFailure('GCP Secrets Manager provider test failed', {
+                operation: 'test',
+                error,
+            });
             return [false, error instanceof Error ? error.message : 'Unknown error'];
         }
     }
     async disconnect() {
     }
     async update() {
-        const { projectId } = this.settings;
-        const [rawSecretNames] = await this.client.listSecrets({
-            parent: `projects/${projectId}`,
-        });
-        const secretNames = rawSecretNames.reduce((acc, cur) => {
-            if (!cur.name)
+        try {
+            const { projectId } = this.settings;
+            const [rawSecretNames] = await this.client.listSecrets({
+                parent: `projects/${projectId}`,
+            });
+            const secretNames = rawSecretNames.reduce((acc, cur) => {
+                if (!cur.name)
+                    return acc;
+                const secretName = cur.name.split('/').pop();
+                if (secretName)
+                    acc.push(secretName);
                 return acc;
-            const secretName = cur.name.split('/').pop();
-            if (secretName)
-                acc.push(secretName);
-            return acc;
-        }, []);
-        const promises = secretNames.map(async (name) => {
-            let versions;
-            try {
-                versions = await this.client.accessSecretVersion({
-                    name: `projects/${projectId}/secrets/${name}/versions/latest`,
-                });
-            }
-            catch (error) {
-                const errorCode = error?.code;
-                if (errorCode === 7 || errorCode === 5 || errorCode === 14) {
-                    this.logger.info(`Skipping GCP secret: ${name}, version: latest as the version is not accessible`, {
-                        error: (0, n8n_workflow_1.ensureError)(error),
+            }, []);
+            const skippedSecrets = [];
+            let firstSkippedError;
+            const promises = secretNames.map(async (name) => {
+                let versions;
+                try {
+                    versions = await this.client.accessSecretVersion({
+                        name: `projects/${projectId}/secrets/${name}/versions/latest`,
                     });
                 }
-                else {
-                    throw error;
+                catch (error) {
+                    const errorCode = this.getGcpErrorCode(error);
+                    if (errorCode === 7 || errorCode === 5 || errorCode === 14) {
+                        if (firstSkippedError === undefined) {
+                            firstSkippedError = error;
+                        }
+                        this.logger.debug('Skipping inaccessible GCP secret version', {
+                            providerName: this.name,
+                            operation: 'update',
+                            projectId,
+                            secretName: name,
+                            errorCode,
+                        });
+                        skippedSecrets.push({
+                            name,
+                            errorCode: errorCode ?? 'unknown',
+                        });
+                    }
+                    else {
+                        throw error;
+                    }
                 }
+                if (!Array.isArray(versions) || !versions.length)
+                    return null;
+                const [latestVersion] = versions;
+                if (!latestVersion.payload?.data)
+                    return null;
+                const value = latestVersion.payload.data.toString();
+                if (!value)
+                    return null;
+                return { name, value };
+            });
+            const results = await Promise.all(promises);
+            this.cachedSecrets = results.reduce((acc, cur) => {
+                if (cur)
+                    acc[cur.name] = cur.value;
+                return acc;
+            }, {});
+            const failureSummary = (0, secrets_provider_errors_1.buildFailureSummaryLogContext)(skippedSecrets);
+            if (failureSummary) {
+                this.logOperationFailure('Skipped inaccessible GCP secret versions during update', {
+                    operation: 'update',
+                    error: firstSkippedError instanceof Error
+                        ? firstSkippedError
+                        : new Error('One or more GCP secret versions were inaccessible'),
+                    context: failureSummary,
+                });
             }
-            if (!Array.isArray(versions) || !versions.length)
-                return null;
-            const [latestVersion] = versions;
-            if (!latestVersion.payload?.data)
-                return null;
-            const value = latestVersion.payload.data.toString();
-            if (!value)
-                return null;
-            return { name, value };
-        });
-        const results = await Promise.all(promises);
-        this.cachedSecrets = results.reduce((acc, cur) => {
-            if (cur)
-                acc[cur.name] = cur.value;
-            return acc;
-        }, {});
-        this.logger.debug('GCP Secrets Manager provider secrets updated');
+            this.logger.debug('GCP Secrets Manager provider secrets updated');
+        }
+        catch (error) {
+            this.logOperationFailure('Failed to update GCP Secrets Manager provider secrets', {
+                operation: 'update',
+                error,
+            });
+            throw error;
+        }
     }
     getSecret(name) {
         return this.cachedSecrets[name];
@@ -153,6 +208,7 @@ class GcpSecretsManager extends types_1.SecretsProvider {
         const privateKey = secretAccountKey.private_key?.trim();
         const projectId = secretAccountKey.project_id?.trim();
         if (!clientEmail || !privateKey) {
+            this.logger.warn('Service account key must contain "client_email" and "private_key" fields. Use the downloaded service account JSON key file from Google Cloud Console.');
             throw new n8n_workflow_1.UserError('Service account key must contain "client_email" and "private_key" fields. Use the downloaded service account JSON key file from Google Cloud Console.');
         }
         return {
@@ -161,6 +217,34 @@ class GcpSecretsManager extends types_1.SecretsProvider {
             privateKey,
         };
     }
+    getGcpErrorCode(error) {
+        if (typeof error === 'object' && error !== null && 'code' in error) {
+            const { code } = error;
+            if (typeof code === 'number' || typeof code === 'string') {
+                return code;
+            }
+        }
+        return undefined;
+    }
+    logOperationFailure(message, params) {
+        const context = { ...params.context };
+        const errorCode = this.getGcpErrorCode(params.error);
+        if (errorCode !== undefined) {
+            context.errorCode = errorCode;
+        }
+        if (this.settings?.projectId) {
+            context.projectId = this.settings.projectId;
+        }
+        (0, secrets_provider_errors_1.logSecretsProviderOperationFailure)({
+            logger: this.logger,
+            message,
+            providerName: this.name,
+            providerDisplayName: this.displayName,
+            operation: params.operation,
+            error: params.error,
+            context,
+        });
+    }
 }
 exports.GcpSecretsManager = GcpSecretsManager;
 //# sourceMappingURL=gcp-secrets-manager.js.map

package/dist/modules/external-secrets.ee/providers/gcp-secrets-manager/gcp-secrets-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"gcp-secrets-manager.js","sourceRoot":"","sources":["../../../../../src/modules/external-secrets.ee/providers/gcp-secrets-manager/gcp-secrets-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wDAA6C;AAC7C,gCAAoC;AACpC,+CAAuF;AAOvF,+CAAmD;AACnD,uCAA8C;AAE9C,MAAa,iBAAkB,SAAQ,uBAAe;IA0BrD,YAA6B,SAAS,cAAS,CAAC,GAAG,CAAC,uBAAM,CAAC;QAC1D,KAAK,EAAE,CAAC;QADoB,WAAM,GAAN,MAAM,CAAwB;QAzB3D,SAAI,GAAG,mBAAmB,CAAC;QAE3B,gBAAW,GAAG,qBAAqB,CAAC;QAEpC,eAAU,GAAsB;YAC/B,4BAAgB;YAChB;gBACC,WAAW,EAAE,qBAAqB;gBAClC,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC/B,WAAW,EAAE,4EAA4E;gBACzF,IAAI,EAAE,4DAA4D;gBAClE,gBAAgB,EAAE,IAAI;aACtB;SACD,CAAC;QAEM,kBAAa,GAA2B,EAAE,CAAC;QAQlD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAiC;QAC3C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAChF,CAAC;IAES,KAAK,CAAC,SAAS;QACxB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE7D,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,GAAG,wDAAa,8BAA8B,GAAC,CAAC;QAI/F,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC;YAC3B,WAAW,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE;YACnE,SAAS;SACT,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,KAAK,EAAE,0CAA0C,CAAC,CAAC;QAE7E,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC1E,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU;IAEhB,CAAC;IAED,KAAK,CAAC,MAAM;QACX,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAEpC,MAAM,CAAC,cAAc,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YACtD,MAAM,EAAE,YAAY,SAAS,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAChE,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,OAAO,GAAG,CAAC;YAE1B,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAE7C,IAAI,UAAU;gBAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAErC,OAAO,GAAG,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC/C,IAAI,QAMQ,CAAC;YAEb,IAAI,CAAC;gBACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;oBAChD,IAAI,EAAE,YAAY,SAAS,YAAY,IAAI,kBAAkB;iBAC7D,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAGhB,MAAM,SAAS,GAAG,KAAK,EAAE,IAAI,CAAC;gBAC9B,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;oBAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,wBAAwB,IAAI,oDAAoD,EAChF;wBACC,KAAK,EAAE,IAAA,0BAAW,EAAC,KAAK,CAAC;qBACzB,CACD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBAEP,MAAM,KAAK,CAAC;gBACb,CAAC;YACF,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAE9D,MAAM,CAAC,aAAa,CAAC,GAAG,QAAQ,CAAC;YAEjC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI;gBAAE,OAAO,IAAI,CAAC;YAE9C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAEpD,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YAExB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE5C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,MAAM,CAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACxE,IAAI,GAAG;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;YACnC,OAAO,GAAG,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACnE,CAAC;IAED,SAAS,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,SAAS,CAAC,IAAY;QACrB,OAAO,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,cAAc;QACb,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAEO,qBAAqB,CAAC,iBAAyB;QACtD,MAAM,gBAAgB,GAAG,IAAA,wBAAS,EAAyB,iBAAiB,EAAE;YAC7E,aAAa,EAAE,EAAE;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1D,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QAEtD,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,wBAAS,CAClB,uJAAuJ,CACvJ,CAAC;QACH,CAAC;QAED,OAAO;YACN,SAAS,EAAE,SAAS,IAAI,EAAE;YAC1B,WAAW;YACX,UAAU;SACV,CAAC;IACH,CAAC;CACD;AAvKD,8CAuKC"}
+{"version":3,"file":"gcp-secrets-manager.js","sourceRoot":"","sources":["../../../../../src/modules/external-secrets.ee/providers/gcp-secrets-manager/gcp-secrets-manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,wDAA6C;AAC7C,gCAAoC;AACpC,+CAA0E;AAO1E,+CAAmD;AACnD,kFAM8C;AAC9C,uCAA8C;AAE9C,MAAa,iBAAkB,SAAQ,uBAAe;IA0BrD,YAA6B,SAAS,cAAS,CAAC,GAAG,CAAC,uBAAM,CAAC;QAC1D,KAAK,EAAE,CAAC;QADoB,WAAM,GAAN,MAAM,CAAwB;QAzB3D,SAAI,GAAG,mBAAmB,CAAC;QAE3B,gBAAW,GAAG,qBAAqB,CAAC;QAEpC,eAAU,GAAsB;YAC/B,4BAAgB;YAChB;gBACC,WAAW,EAAE,qBAAqB;gBAClC,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC/B,WAAW,EAAE,4EAA4E;gBACzF,IAAI,EAAE,4DAA4D;gBAClE,gBAAgB,EAAE,IAAI;aACtB;SACD,CAAC;QAEM,kBAAa,GAA2B,EAAE,CAAC;QAQlD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAiC;QAC3C,IAAI,CAAC;YACJ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,mBAAmB,CAAC,mDAAmD,EAAE;gBAC7E,SAAS,EAAE,YAAY;gBACvB,KAAK;aACL,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAES,KAAK,CAAC,SAAS;QACxB,IAAI,CAAC;YACJ,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;YAE7D,MAAM,EAAE,0BAA0B,EAAE,SAAS,EAAE,GAAG,wDACjD,8BAA8B,GAC9B,CAAC;YAIF,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC;gBAC3B,WAAW,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE;gBACnE,SAAS;aACT,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,mBAAmB,CAAC,gDAAgD,EAAE;gBAC1E,SAAS,EAAE,SAAS;gBACpB,KAAK;aACL,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,KAAK,EAAE,0CAA0C,CAAC,CAAC;QAE7E,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACzB,IAAI,CAAC,mBAAmB,CAAC,0CAA0C,EAAE;gBACpE,SAAS,EAAE,MAAM;gBACjB,KAAK;aACL,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC1E,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU;IAEhB,CAAC;IAED,KAAK,CAAC,MAAM;QACX,IAAI,CAAC;YACJ,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;YAEpC,MAAM,CAAC,cAAc,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBACtD,MAAM,EAAE,YAAY,SAAS,EAAE;aAC/B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBAChE,IAAI,CAAC,GAAG,CAAC,IAAI;oBAAE,OAAO,GAAG,CAAC;gBAE1B,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBAE7C,IAAI,UAAU;oBAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAErC,OAAO,GAAG,CAAC;YACZ,CAAC,EAAE,EAAE,CAAC,CAAC;YAEP,MAAM,cAAc,GAAyD,EAAE,CAAC;YAChF,IAAI,iBAA0B,CAAC;YAE/B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC/C,IAAI,QAMQ,CAAC;gBAEb,IAAI,CAAC;oBACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;wBAChD,IAAI,EAAE,YAAY,SAAS,YAAY,IAAI,kBAAkB;qBAC7D,CAAC,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAGhB,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;oBAC9C,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;wBAC5D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;4BACrC,iBAAiB,GAAG,KAAK,CAAC;wBAC3B,CAAC;wBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;4BAC7D,YAAY,EAAE,IAAI,CAAC,IAAI;4BACvB,SAAS,EAAE,QAAQ;4BACnB,SAAS;4BACT,UAAU,EAAE,IAAI;4BAChB,SAAS;yBACT,CAAC,CAAC;wBACH,cAAc,CAAC,IAAI,CAAC;4BACnB,IAAI;4BACJ,SAAS,EAAE,SAAS,IAAI,SAAS;yBACjC,CAAC,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBAEP,MAAM,KAAK,CAAC;oBACb,CAAC;gBACF,CAAC;gBAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;oBAAE,OAAO,IAAI,CAAC;gBAE9D,MAAM,CAAC,aAAa,CAAC,GAAG,QAAQ,CAAC;gBAEjC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI;oBAAE,OAAO,IAAI,CAAC;gBAE9C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAEpD,IAAI,CAAC,KAAK;oBAAE,OAAO,IAAI,CAAC;gBAExB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACxB,CAAC,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE5C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,MAAM,CAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACxE,IAAI,GAAG;oBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;gBACnC,OAAO,GAAG,CAAC;YACZ,CAAC,EAAE,EAAE,CAAC,CAAC;YAEP,MAAM,cAAc,GAAG,IAAA,uDAA6B,EAAC,cAAc,CAAC,CAAC;YACrE,IAAI,cAAc,EAAE,CAAC;gBACpB,IAAI,CAAC,mBAAmB,CAAC,wDAAwD,EAAE;oBAClF,SAAS,EAAE,QAAQ;oBACnB,KAAK,EACJ,iBAAiB,YAAY,KAAK;wBACjC,CAAC,CAAC,iBAAiB;wBACnB,CAAC,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC;oBAClE,OAAO,EAAE,cAAc;iBACvB,CAAC,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,mBAAmB,CAAC,uDAAuD,EAAE;gBACjF,SAAS,EAAE,QAAQ;gBACnB,KAAK;aACL,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,SAAS,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,SAAS,CAAC,IAAY;QACrB,OAAO,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,cAAc;QACb,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAEO,qBAAqB,CAAC,iBAAyB;QACtD,MAAM,gBAAgB,GAAG,IAAA,wBAAS,EAAyB,iBAAiB,EAAE;YAC7E,aAAa,EAAE,EAAE;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QAC1D,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QACxD,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QAEtD,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,uJAAuJ,CACvJ,CAAC;YACF,MAAM,IAAI,wBAAS,CAClB,uJAAuJ,CACvJ,CAAC;QACH,CAAC;QAED,OAAO;YACN,SAAS,EAAE,SAAS,IAAI,EAAE;YAC1B,WAAW;YACX,UAAU;SACV,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,KAAc;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACpE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;YACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1D,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,mBAAmB,CAC1B,OAAe,EACf,MAA6C;QAE7C,MAAM,OAAO,GAAe,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC7C,CAAC;QAED,IAAA,4DAAkC,EAAC;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO;YACP,YAAY,EAAE,IAAI,CAAC,IAAI;YACvB,mBAAmB,EAAE,IAAI,CAAC,WAAW;YACrC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO;SACP,CAAC,CAAC;IACJ,CAAC;CACD;AAlQD,8CAkQC"}

package/dist/modules/external-secrets.ee/providers/infisical.d.ts

@@ -3,6 +3,35 @@ import { OutboundHttp } from '@n8n/backend-network';
 import { type INodeProperties } from 'n8n-workflow';
 import type { SecretsProviderSettings } from '../types';
 import { SecretsProvider } from '../types';
+export type InfisicalAuthMethod = 'universalAuth';
+export interface InfisicalSettings {
+    siteURL: string;
+    projectId: string;
+    environment: string;
+    secretPath: string;
+    authMethod: InfisicalAuthMethod;
+    clientId: string;
+    clientSecret: string;
+}
+export interface InfisicalUniversalAuthLoginResponse {
+    accessToken: string;
+    expiresIn: number;
+    accessTokenMaxTTL: number;
+    tokenType: string;
+}
+export interface InfisicalSecret {
+    secretKey: string;
+    secretValue: string;
+}
+export interface InfisicalImport {
+    secrets: InfisicalSecret[];
+    secretPath: string;
+    environment: string;
+}
+export interface InfisicalListSecretsResponse {
+    secrets: InfisicalSecret[];
+    imports: InfisicalImport[];
+}
 export declare class InfisicalProvider extends SecretsProvider {
     readonly logger: Logger;
     private readonly outboundHttp;
@@ -33,4 +62,6 @@ export declare class InfisicalProvider extends SecretsProvider {
     getSecretNames(): string[];
     hasSecret(name: string): boolean;
     private buildAuthHeaders;
+    private verifyWorkspaceAccess;
+    private logOperationFailure;
 }