#!/usr/bin/env bash
# nerf-az-keyvault-secret-list -- List secret names in a Key Vault (no values).
# Generated from az-keyvault manifest. Do not edit directly.
# nerf:threat:read=remote
# nerf:threat:write=none

set -euo pipefail

_NERF_DRY_RUN=""

usage() {
  cat >&2 <<'EOF'
Usage: nerf-az-keyvault-secret-list [--subscription <subscription>] <vault_name>

Options:
  --subscription <subscription>
      Subscription name or ID (defaults to active)

Arguments:
  <vault_name> (required)
      Key Vault name

Maps to: az keyvault secret list --vault-name <vault_name> <subscription> --output json

List secret names in a Key Vault (no values).
EOF
  exit 1
}

SUBSCRIPTION=""
_SUBSCRIPTION_SET=""

while [[ $# -gt 0 ]]; do
  case "$1" in
    --subscription) if [[ -n "${_SUBSCRIPTION_SET}" ]]; then echo "error: --subscription can only be specified once" >&2; exit 1; fi; SUBSCRIPTION="$2"; _SUBSCRIPTION_SET=true; shift 2 ;;
    --nerf-dry-run) _NERF_DRY_RUN="true"; shift 1 ;;
    -h|--help) usage ;;
    --) shift; break ;;
    *) break ;;
  esac
done

_VAULT_NAME_SET=""
if [[ $# -gt 0 ]]; then
  VAULT_NAME="$1"
  _VAULT_NAME_SET=true
  shift
else
  VAULT_NAME=""
fi
if [[ $# -gt 0 ]]; then
  echo "error: nerf-az-keyvault-secret-list: unexpected extra arguments: $*" >&2
  echo "  hint: switches and options must come before positional arguments" >&2
  exit 1
fi

if [[ -n "${_VAULT_NAME_SET}" ]] && [[ "${VAULT_NAME}" == -* ]]; then
  echo "error: nerf-az-keyvault-secret-list: <vault_name> cannot start with '-'" >&2
  echo "  hint: use -- before positional arguments if needed" >&2
  exit 1
fi

if [[ -z "${VAULT_NAME}" ]]; then
  echo "error: nerf-az-keyvault-secret-list: missing required argument <vault_name>" >&2
  echo "  hint: provide a value for <vault_name>" >&2
  usage
fi

if [[ "$_NERF_DRY_RUN" == "true" ]]; then
  _NERF_DRY_CMD=(az keyvault secret list --vault-name "${VAULT_NAME}" ${_SUBSCRIPTION_SET:+"--subscription"} ${_SUBSCRIPTION_SET:+"$SUBSCRIPTION"} --output json)
  printf 'dry-run:'
  for _a in "${_NERF_DRY_CMD[@]}"; do printf " %q" "$_a"; done
  echo
  exit 0
fi

exec az keyvault secret list --vault-name "${VAULT_NAME}" ${_SUBSCRIPTION_SET:+"--subscription"} ${_SUBSCRIPTION_SET:+"$SUBSCRIPTION"} --output json
