From d0dc9f97816ef0a4fd94c321debba14493d34672 Mon Sep 17 00:00:00 2001
From: Jon Langevin <codingsloth@pm.me>
Date: Sun, 31 May 2026 14:46:33 -0400
Subject: [PATCH] chore: advertise required_secrets[] for wfctl secrets setup

---
 plugin.json | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/plugin.json b/plugin.json
index 9c7bf0f..09e654d 100644
--- a/plugin.json
+++ b/plugin.json
@@ -7,6 +7,32 @@
   "type": "external",
   "tier": "community",
   "minEngineVersion": "0.64.3",
+  "required_secrets": [
+    {
+      "name": "AZURE_CLIENT_ID",
+      "sensitive": false,
+      "description": "Azure AD app (service principal) client ID for DefaultAzureCredential. Referenced as ${AZURE_CLIENT_ID}.",
+      "prompt": "Azure client ID"
+    },
+    {
+      "name": "AZURE_CLIENT_SECRET",
+      "sensitive": true,
+      "description": "Azure AD app client secret. Referenced as ${AZURE_CLIENT_SECRET}.",
+      "prompt": "Azure client secret"
+    },
+    {
+      "name": "AZURE_TENANT_ID",
+      "sensitive": false,
+      "description": "Azure AD tenant ID. Referenced as ${AZURE_TENANT_ID}.",
+      "prompt": "Azure tenant ID"
+    },
+    {
+      "name": "AZURE_SUBSCRIPTION_ID",
+      "sensitive": false,
+      "description": "Azure subscription ID for IaC operations. Referenced as ${AZURE_SUBSCRIPTION_ID}.",
+      "prompt": "Azure subscription ID"
+    }
+  ],
   "iacServices": [
     "workflow.plugin.external.iac.IaCProviderRequired",
     "workflow.plugin.external.iac.IaCProviderEnumerator",