NewClient returns an implementation of the client interface that allows secret management.

ReduceRequired secrets into one set.

Secret data model, a subset of properties of a cloudkms secret.

Client interface for secrets.

Required secrets map, where the key is the domain of the secret and the values are the types of secrets This should map to the naming scheme of the encrypted secret file, e.g.: - Secret file naming should be "secret_domain-secret_type-cloudkms_env.json" - If a required secret is from some api, it is a key, the domain is "some_api" and the type "key" - If the file was encrypted using cloudkms in a "dev" env, the file name is "some_api-key-cloudkms_dev.json".