iA zdZddlZddlZddlmZmZddlZddlmZddl m Z dZ d dede d e d eed ee f d Z y)z^ Secret Manager Handler Handles retrieving secrets from different secret management systems. N)AnyOptional) print_verbose)KeyManagementSystemcddl} tjtj|j |k(S#|j $rYywxYw)z"Check if a string is valid base64.rNF)binasciibase64 b64encode b64decodedecodeError)srs /Users/manta/Documents/Projects/TheRoad-I1/.venv/lib/python3.12/site-packages/litellm/secret_managers/secret_manager_handler.py _is_base64rsJ 0 0 34;;=BB >>s8?AAclient key_manager secret_namekey_management_settingsreturncd}|tjjk(s1t|jdzt|j zdk(r|j |j}|S|tjjk(s|jj dk(rtj|}| tdt|}|durtj|}|}n td|jt j"|d }|j$j'd }|S|tj(jk(r tj|d} | t+d j-|tj| } d | i} |jdi| }|d } | j'd }t/|t0r|j3}|S|tj4jk(rEddlm} t/|| r1d}| |j:}|j=||}t?d||S|tj@jk(r3 |jC|}t?d||td| |S|tjDjk(r& |j=|}|td| |S|tjFjk(r& |j=|}|td| |S|tjHjk(rjddl%m&}t/||r5|j=||r|jOnd}|/td|tdt|j |S|dk(rtj|}|S|j |jP}|S#t*$r}t?dt1||d}~wwxYw#t*$r}t?dt1||d}~wwxYw#t*$r}t?dt1||d}~wwxYw)aL Get a secret from the configured secret manager. Args: client: The secret manager client instance key_manager: The type of key manager (e.g., "azure_key_vault", "google_kms", etc.) secret_name: The name/path of the secret to retrieve key_management_settings: Optional settings for the key management system Returns: The secret value as a string, or None if not found Raises: ValueError: If the secret cannot be retrieved or required parameters are missing Exception: For other errors during secret retrieval N.z+azure.keyvault.secrets._client.SecretClientKeyManagementServiceClientzBGoogle KMS requires the encrypted secret to be in the environment!Tz@Google KMS requires the encrypted secret to be encoded in base64)name ciphertext)requestzutf-8z+AWS KMS - Encrypted Value of Key={} is NoneCiphertextBlob Plaintextr)AWSSecretsManagerV2)rprimary_secret_namezget_secret_value_response: z$secret from google secret manager: z-No secret found in Google Secret Manager for zAn error occurred - )rz0No secret found in Hashicorp Secret Manager for z/No secret found in CyberArk Secret Manager for )CustomSecretManager)roptional_paramsz-No secret found in Custom Secret Manager for zMCustom secret manager client must be an instance of CustomSecretManager, got local))rAZURE_KEY_VAULTvaluetype __module____name__ get_secret GOOGLE_KMS __class__osgetenv ValueErrorrr r decryptlitellm_google_kms_resource_name plaintextr AWS_KMS Exceptionformat isinstancestrstripAWS_SECRET_MANAGER-litellm.secret_managers.aws_secret_manager_v2rrsync_read_secretrGOOGLE_SECRET_MANAGER%get_secret_from_google_secret_managerHASHICORP_VAULTCYBERARKCUSTOM*litellm.integrations.custom_secret_managerr model_dump secret_value)rrrrsecretencrypted_secretb64_flagrresponseencrypted_valueciphertext_blobparamsr2rrer s rget_secret_from_managerrLs,F *::@@@ < " "S (4<+@+@ @ 8 9"";/55@ M{ *55;;;    $ $(D D " + 6  #T ./ t %//0@A )JR >>99("  ##**  N MG +3399 9 ))K6  "=DD[Q !**?;#O4!6>>+F+[) !!'* fc "\\^F\ MY +>>DD D  f1 2"& &2&=&Q&Q#,,'$7-F 7x@ A| My +AAGG G AA+NF @I J~ CK=Qp Ma +;;AA A ,,,EF~ F{mTZ MK +44:: : ,,,EF~ Ek]SD M5 +2288 8R f1 2,,'*!8 B B D -F ~ CK=Q_`dek`l`u`u_vw  M  ;' M"";/<< Mi  0Q9 :G   0Q9 :G   0Q9 :G sH+/O#;"P >"P7# P ,PP  P4P//P47 QQQ)N)__doc__r r,typingrrr0litellm._loggingr"litellm.types.secret_managers.mainrrr7rLr#rrRsi  *B.2 ] ]]]&c] ] c] ]rQ