feat(azdext): Add KeyVault resolver for extension secret resolution#7043

Merged

jongio merged 22 commits intoAzure:mainfrom

jongio:feature/ext-sdk-kv-resolver

Mar 31, 2026

Commits on Mar 30, 2026

feat(azdext): Add KeyVaultResolver for extension Key Vault secret resolution

jongio
and
Copilot
committed
fix: remove duplicate stubCredential (already in token_provider_test.go)

jongio
and
Copilot
committed
fix: remove stale files from KV resolver branch

jongio
and
Copilot
committed
fix: suppress gosec G101 false positives in test fixtures

jongio
and
Copilot
committed
Fix security and code quality audit findings

jongio
and
Copilot
committed
Remove stray coverage artifact

jongio
and
Copilot
committed
fix: resolve cspell and gosec CI failures

jongio
and
Copilot
committed
fix: apply go fix modernization (strings.Cut)

jongio
and
Copilot
committed
fix: address Copilot review feedback on KeyVaultResolver

jongio
and
Copilot
committed
fix: remove sort.Strings(result) that breaks env var override semantics
jongio
committed
fix: use case-insensitive matching for @Microsoft.KeyVault prefix
jongio
committed
fix: reject non-standard ports in @Microsoft.KeyVault SecretUri
jongio
committed
fix: reject empty vault name when hostname equals a bare suffix
jongio
committed
refactor: use slices.Sorted(maps.Keys(...)) in ResolveMap
jongio
committed
refactor: use t.Context() instead of context.Background() in tests
jongio
committed
test: add @Microsoft.KeyVault cases to IsSecretReference test
jongio
committed
test: consolidate HTTP error tests, add recording stub, test error collection
jongio
committed
test: add tests for ResolveSecretEnvironment and SecretFromKeyVaultReference
jongio
committed
refactor: use errors.AsType per Go 1.26+ conventions

jongio
and
Copilot
committed
fix: resolve CI failures — gofmt and missing mock method

jongio
and
Copilot
committed
fix: add ResolveEnvironment, VaultName format, and quote stripping to KeyVault resolver

jongio
and
Copilot
committed

Commits on Mar 31, 2026

test: address wbreza re-review — fix data race, modernize test patterns (t.Context, errors.AsType, wg.Go)

jongio
and
Copilot
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(azdext): Add KeyVault resolver for extension secret resolution#7043

feat(azdext): Add KeyVault resolver for extension secret resolution#7043
jongio merged 22 commits intoAzure:mainfrom
jongio:feature/ext-sdk-kv-resolver

Commits on Mar 30, 2026

feat(azdext): Add KeyVaultResolver for extension Key Vault secret resolution

fix: remove duplicate stubCredential (already in token_provider_test.go)

fix: remove stale files from KV resolver branch

fix: suppress gosec G101 false positives in test fixtures

Fix security and code quality audit findings

Remove stray coverage artifact

fix: resolve cspell and gosec CI failures

fix: apply go fix modernization (strings.Cut)

fix: address Copilot review feedback on KeyVaultResolver

fix: remove sort.Strings(result) that breaks env var override semantics

fix: use case-insensitive matching for @Microsoft.KeyVault prefix

fix: reject non-standard ports in @Microsoft.KeyVault SecretUri

fix: reject empty vault name when hostname equals a bare suffix

refactor: use slices.Sorted(maps.Keys(...)) in ResolveMap

refactor: use t.Context() instead of context.Background() in tests

test: add @Microsoft.KeyVault cases to IsSecretReference test

test: consolidate HTTP error tests, add recording stub, test error collection

test: add tests for ResolveSecretEnvironment and SecretFromKeyVaultReference

refactor: use errors.AsType per Go 1.26+ conventions

fix: resolve CI failures — gofmt and missing mock method

fix: add ResolveEnvironment, VaultName format, and quote stripping to KeyVault resolver

Commits on Mar 31, 2026

test: address wbreza re-review — fix data race, modernize test patterns (t.Context, errors.AsType, wg.Go)