azsweep

type APIError struct {
	Subscription string
	Status       int
	Code         string
	Message      string
}

type Attrs struct {
	// Provider is the provider type the block configures,
	// [ProviderAzureRM] or [ProviderAzAPI]. It decides which environment
	// variables apply ([Attrs.WithEnv]) and which endpoint arguments are
	// read.
	Provider string

	// SubscriptionID is the subscription the block defaults to: the one a
	// client covers when its caller names no other ([Client.Subscription]).
	SubscriptionID string
	TenantID       string

	ClientID             string
	ClientIDFilePath     string
	ClientSecret         string
	ClientSecretFilePath string

	ClientCertificate         string
	ClientCertificatePath     string
	ClientCertificatePassword string

	// UseCLI, UseMSI, UseOIDC and UseAKSWorkloadIdentity are the four
	// switches. Nil is unset, which both providers default to true for
	// use_cli and false for the rest.
	UseCLI                 *bool
	UseMSI                 *bool
	UseOIDC                *bool
	UseAKSWorkloadIdentity *bool
	// MSIEndpoint is azurerm's msi_endpoint; azapi has none.
	MSIEndpoint string

	OIDCToken         string
	OIDCTokenFilePath string
	OIDCRequestURL    string
	OIDCRequestToken  string
	// ADOServiceConnectionID is azurerm's ado_pipeline_service_connection_id
	// or azapi's oidc_azure_service_connection_id: the same Azure DevOps
	// service connection under two names.
	ADOServiceConnectionID string

	// Environment is the cloud: public (the default), usgovernment or
	// china.
	Environment string
	// MetadataHost is azurerm's metadata_host, a host serving
	// /metadata/endpoints that names the cloud's endpoints in place of
	// Environment. azapi has none.
	MetadataHost string
	// ResourceManagerEndpoint, ResourceManagerAudience and
	// ActiveDirectoryAuthorityHost are azapi's endpoint block, each
	// overriding Environment's value. azurerm has no endpoint block.
	ResourceManagerEndpoint      string
	ResourceManagerAudience      string
	ActiveDirectoryAuthorityHost string
	// DisableInstanceDiscovery is azapi's disable_instance_discovery (azapi
	// 2.13.0 provider.go:566-576, ARM_DISABLE_INSTANCE_DISCOVERY when
	// unset): the token request skips Microsoft's instance discovery
	// service. azurerm has none; its go-azure-sdk credentials never ask.
	DisableInstanceDiscovery *bool

	// Marked names the arguments the block sets to a marked value that
	// [ProviderAttrs] therefore left unread. [New] refuses a client when
	// any is set ([Attrs.refusedMarks]).
	Marked []string
}

type Client struct {
	// contains filtered or unexported fields
}

type Config struct {
	// Markers names the owner tag key a search matches. Only [New] reads
	// it.
	Markers markerkeys.Keys
	// Credential is what every token is requested from.
	Credential azcore.TokenCredential
	// Endpoints are the ARM base URL and token audience; the Key Vault
	// listing reads neither, since a vault's URL names its own cloud.
	Endpoints Endpoints
	// HTTPClient carries every call; nil is http.DefaultClient.
	HTTPClient *http.Client
	// Credentials is what diagnostics name the credential as.
	Credentials Credentials
	// Subscription is the provider block's subscription_id, the one a
	// [Coverage] built from provider blocks keys the client by.
	Subscription string
}

type Coverage map[string]Searcher

type Credentials struct {
	// Method is the credential chain's choice, in its own words: "Client
	// Secret Auth", "Azure CLI Auth", "Managed Service Identity Auth".
	// Empty when the caller names none ([Config.Credentials]).
	Method string
	// TenantID and ClientID are the block's, when it names them.
	TenantID string
	ClientID string
}

type Endpoints struct {
	// ResourceManager is the ARM base URL: https://management.azure.com/
	// for the public cloud.
	ResourceManager string
	// Audience is the resource a token is requested for; the scope asked
	// for is Audience + "/.default".
	Audience string
}

type KeyVaultClient struct {
	// contains filtered or unexported fields
}

type KeyVaultItem struct {
	ID   string
	Name string
	Tags map[string]string
}

type NotRegisteredError struct {
	Subscription string
	// Code is ARM's error code, one of [unregisteredCodes].
	Code    string
	Message string
}

type PartialError struct {
	Subscription string
	PagesRead    int
	RowsRead     int
	Err          error
}

type Resource struct {
	// ID is the ARM id, in the casing Resource Graph returns it. ARM ids
	// are case-insensitive; compare them with strings.EqualFold.
	ID string
	// Type is the ARM type, which Resource Graph lowercases:
	// "microsoft.network/virtualnetworks".
	Type           string
	Name           string
	ResourceGroup  string
	SubscriptionID string
	Location       string
	// Tags are the resource's tags as carried, the estate's among them
	// under whatever casing its writer used.
	Tags map[string]string
	// ManagedBy is ARM's managedBy: the id of the resource that manages
	// this one (an AKS cluster on its node resource group, a managed
	// application on its resources), or "" when nothing does. Set, the
	// resource is controller-held evidence (#1122) for the family to
	// judge; this client does not exclude it.
	ManagedBy string
}

type Searcher interface {
	// Search returns every resource in subscription carrying the tag
	// tofu-estate=estate (the key in any case), all pages read, or an
	// error and no resources.
	Search(ctx context.Context, subscription, estate string) ([]Resource, error)
}

type SubscriptionResult struct {
	Subscription string
	Resources    []Resource
	Err          error
}

type Tagger struct {
	// contains filtered or unexported fields
}

type ThrottledError struct {
	Subscription string
	Attempts     int
	// RetryAfter is the last wait the service asked for.
	RetryAfter time.Duration
}

type TypeSearcher interface {
	SearchTypes(ctx context.Context, subscription, estate string, armTypes []string) ([]Resource, error)
}

type UncoveredSubscriptionError struct {
	Subscription string
}

type UnreadableSubscriptionError struct {
	Subscription string
	Credentials  Credentials
	Status       int
	Code         string
	Message      string
}