function getCredConfig()

in run/idp-sql/secrets.js [18:50]

• 24 lines of code
• 7 McCabe index (conditional complexity)

function getCredConfig() {
  // [START cloudrun_user_auth_secrets]
  // CLOUD_SQL_CREDENTIALS_SECRET is the resource ID of the secret, passed in by environment variable.
  // Format: projects/PROJECT_ID/secrets/SECRET_ID/versions/VERSION
  const {CLOUD_SQL_CREDENTIALS_SECRET} = process.env;
  if (CLOUD_SQL_CREDENTIALS_SECRET) {
    try {
      // Parse the secret that has been added as a JSON string
      // to retrieve database credentials
      return JSON.parse(CLOUD_SQL_CREDENTIALS_SECRET.toString('utf8'));
    } catch (err) {
      throw Error(
        `Unable to parse secret from Secret Manager. Make sure that the secret is JSON formatted: ${err}`
      );
    }
  }
  // [END cloudrun_user_auth_secrets]
  logger.info(
    'CLOUD_SQL_CREDENTIALS_SECRET env var not set. Defaulting to environment variables.'
  );
  if (!process.env.DB_USER) throw Error('DB_USER needs to be set.');
  if (!process.env.DB_PASSWORD) throw Error('DB_PASSWORD needs to be set.');
  if (!process.env.DB_NAME) throw Error('DB_NAME needs to be set.');
  if (!process.env.CLOUD_SQL_CONNECTION_NAME)
    throw Error('CLOUD_SQL_CONNECTION_NAME needs to be set.');

  return {
    DB_USER: process.env.DB_USER,
    DB_PASSWORD: process.env.DB_PASSWORD,
    DB_NAME: process.env.DB_NAME,
    CLOUD_SQL_CONNECTION_NAME: process.env.CLOUD_SQL_CONNECTION_NAME,
  };
}