perf(jans-pycloudlib): handle google secret versioning

[iromli]

Prepare

• Read PR guidelines
• Read license information

---

Description

Target issue

closes #7944

Implementation Details

---

Test and Document the changes

• Static code analysis has been run locally and issues have been fixed
• Relevant unit and integration tests have been added/updated
• Relevant documentation has been updated if any (i.e. user guides, installation and configuration guides, technical design docs etc)

[codecov]

Codecov Report

Attention: Patch coverage is 14.81481% with 46 lines in your changes are missing coverage. Please review.

❗ No coverage uploaded for pull request base (main@7128760). Click here to learn what that means.

Files	Patch %	Lines
...pycloudlib/jans/pycloudlib/config/google_config.py	14.28%	24 Missing ⚠️
...pycloudlib/jans/pycloudlib/secret/google_secret.py	15.38%	22 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #7971   +/-   ##
=======================================
  Coverage        ?   60.41%           
=======================================
  Files           ?       36           
  Lines           ?     3165           
  Branches        ?        0           
=======================================
  Hits            ?     1912           
  Misses          ?     1253           
  Partials        ?        0           

Flag	Coverage Δ
unittests	60.41% <14.81%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[sonarqubecloud]

Quality Gate failed for 'jans-pycloudlib'

Failed conditions
64 Duplicated Lines on New Code (required ≤ 20)

See analysis details on SonarCloud

[sonarqubecloud]

Quality Gate passed for 'jans-core'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[sonarqubecloud]

Quality Gate passed for 'orm'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[sonarqubecloud]

Quality Gate passed for 'jans-config-api-parent'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[moabu]

I do have a concern regarding possible leftover versions from race conditions or failed operations. I'm thinking we add a check in certmanager to run it after key rotation which would make sure old versions are cleaned up and only the last CN_GOOGLE_SECRET_MAX_VERSIONS are kept

[iromli]

It is taken care by lower-level jans-pycloudlib google wrapper.

[sonarqubecloud]

Quality Gate passed for 'jans-cli'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud