in pkg/provider/provider.go [99:113]
func (mc *mountConfig) getVaultURL() (vaultURL *string, err error) {
// Key Vault name must be a 3-24 character string
if len(mc.keyvaultName) < 3 || len(mc.keyvaultName) > 24 {
return nil, errors.Errorf("Invalid vault name: %q, must be between 3 and 24 chars", mc.keyvaultName)
}
// See docs for validation spec: https://docs.microsoft.com/en-us/azure/key-vault/about-keys-secrets-and-certificates#objects-identifiers-and-versioning
isValid := regexp.MustCompile(`^[-A-Za-z0-9]+$`).MatchString
if !isValid(mc.keyvaultName) {
return nil, errors.Errorf("Invalid vault name: %q, must match [-a-zA-Z0-9]{3,24}", mc.keyvaultName)
}
vaultDNSSuffixValue := mc.azureCloudEnvironment.KeyVaultDNSSuffix
vaultURI := "https://" + mc.keyvaultName + "." + vaultDNSSuffixValue + "/"
return &vaultURI, nil
}