Azure Vault credential support (#3394)

skyvern/forge/sdk/api/azure.py

@@ -3,26 +3,37 @@ from azure.identity.aio import DefaultAzureCredential
 from azure.keyvault.secrets.aio import SecretClient
 from azure.storage.blob.aio import BlobServiceClient
 
+from skyvern.exceptions import AzureConfigurationError
+
 LOG = structlog.get_logger()
 
 
 class AsyncAzureClient:
-    def __init__(self, account_name: str, account_key: str):
-        self.account_name = account_name
-        self.account_key = account_key
-        self.blob_service_client = BlobServiceClient(
-            account_url=f"https://{account_name}.blob.core.windows.net",
-            credential=account_key,
-        )
+    def __init__(self, storage_account_name: str | None, storage_account_key: str | None):
+        self.storage_account_name = storage_account_name
+        self.storage_account_key = storage_account_key
+
+        if storage_account_name and storage_account_key:
+            self.blob_service_client = BlobServiceClient(
+                account_url=f"https://{storage_account_name}.blob.core.windows.net",
+                credential=storage_account_key,
+            )
+        else:
+            self.blob_service_client = None
+
         self.credential = DefaultAzureCredential()
 
-    async def get_secret(self, secret_name: str) -> str | None:
+    async def get_secret(self, secret_name: str, vault_name: str | None = None) -> str | None:
+        vault_subdomain = vault_name or self.storage_account_name
+        if not vault_subdomain:
+            raise AzureConfigurationError("Missing vault")
+
         try:
             # Azure Key Vault URL format: https://<your-key-vault-name>.vault.azure.net
             # Assuming the secret_name is actually the Key Vault URL and the secret name
             # This needs to be clarified or passed as separate parameters
             # For now, let's assume secret_name is the actual secret name and Key Vault URL is in settings.
-            key_vault_url = f"https://{self.account_name}.vault.azure.net"  # Placeholder, adjust as needed
+            key_vault_url = f"https://{vault_subdomain}.vault.azure.net"  # Placeholder, adjust as needed
             secret_client = SecretClient(vault_url=key_vault_url, credential=self.credential)
             secret = await secret_client.get_secret(secret_name)
             return secret.value
@@ -33,6 +44,9 @@ class AsyncAzureClient:
             await self.credential.close()
 
     async def upload_file_from_path(self, container_name: str, blob_name: str, file_path: str) -> None:
+        if not self.blob_service_client:
+            raise AzureConfigurationError("Storage is not configured")
+
         try:
             container_client = self.blob_service_client.get_container_client(container_name)
             # Create the container if it doesn't exist