ڥdZddlmZddlmZddlmZddlZddlZddlmZddlm Z ddlm Z dd lm Z dd lm Z dd lm Z dd lmZdd lmZddlmZddlmZdd lmZddlmZddlmZddlmZddlm Z ddl!Z!ejDdZ#dZ$dZ%dDdZ& dEdZ'dZ(dZ)dZ* dFdZ+dZ, dGdZ-dZ.d Z/d!Z0 dHd"Z1d#Z2d$Z3d%Z4 dId&Z5d'Z6d(Z7d)Z8d*Z9d+Z:d,Z; dJd-Zd0Z?d1Z@d2ZAd3ZBd4ZC dKd5ZDdKd6ZEd7ZFd8ZGd9ZHd:ZIdLd;ZJd<ZKdKd=ZLd>ZMd?ZNd@ZOdLdAZPdBZQdCZRy)MzHConvenience functions for dealing with instances and instance templates.)absolute_import)division)unicode_literalsN) constants)containers_utils) csek_utils)metadata_utils)utils) zone_utils) exceptions)flags)resource_manager_tags_utils)scope)util)log) resources)timesz2(^[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\.[a-zA-Z0-9-.]+$)zDefault device-name for disk name [{0}] will be [{0}] because it is being mounted to a container with [`--container-mount-disk`]ctjd|}|r8|jd}|jd}|jd}|||fSy)a Gets the CPU and memory specs from the custom machine type name. Args: name: the custom machine type name for the 'instance create' call Returns: A three-tuple with the vm family, number of cpu and amount of memory for the custom machine type. custom_family, the name of the VM family custom_cpu, the number of cpu desired for the custom machine type instance custom_memory_mib, the amount of ram desired in MiB for the custom machine type instance None for both variables otherwise z'([a-zA-Z0-9]+)-custom-([0-9]+)-([0-9]+))NNN)researchgroup)name check_custom custom_family custom_cpucustom_memory_mibs 4lib/googlecloudsdk/api_lib/compute/instance_utils.pyGetCpuRamVmFamilyFromCustomNamer!0sZDdK, &&q)M##A&J$**1- *&7 77 cd|rdj|||}ndj||}|r|dz }|S)aCreates a custom machine type name from the desired CPU and memory specs. Args: custom_cpu: the number of cpu desired for the custom machine type custom_memory_mib: the amount of ram desired in MiB for the custom machine type instance ext: extended custom machine type should be used if true vm_type: VM instance generation Returns: The custom machine type name for the 'instance create' call z{0}-custom-{1}-{2}zcustom-{0}-{1}z-ext)format)rrextvm_type machine_types r GetNameForCustomr(HsG '..w /@BL$**:7HILFL r"c|r|}n&|tj|}ntj}|s|s|r[|stjdd|stjdd|rtj ddt ||dz||}|}|S)a0Interprets the machine type for the instance. Args: machine_type: name of existing machine type, eg. n1-standard custom_cpu: number of CPU cores for custom machine type, custom_memory: amount of RAM memory in bytes for custom machine type, ext: extended custom machine type should be used if true, vm_type: VM instance generation confidential_vm_type: If not None, use default machine type based on confidential-VM encryption type. Returns: A string representing the URL naming a machine-type. Raises: calliope_exceptions.RequiredArgumentException when only one of the two custom machine type flags are used. calliope_exceptions.InvalidArgumentException when both the machine type and custom machine type flags are used to generate a new instance. z --custom-cpuz_Both [--custom-cpu] and [--custom-memory] must be set to create a custom machine type instance.z--custom-memoryz--machine-typez\Cannot set both [--machine-type] and [--custom-cpu]/[--custom-memory] for the same instance.i)r)DEFAULT_MACHINE_TYPE_FOR_CONFIDENTIAL_VMSDEFAULT_MACHINE_TYPEcalliope_exceptionsRequiredArgumentExceptionInvalidArgumentExceptionr()r'r custom_memoryr%r&confidential_vm_typemachine_type_namecustom_type_strings r InterpretMachineTyper3_s6$'!KK"66=C   9 9 : ;;   9 9 = >>  8 8 D EE*%   + r"c|j}|j}d|vr]|j|||}|jd|fg}g}t |j ||} |rt j|dyyy)aChecks that the CPU and memory ratio is a supported custom instance type. Args: compute_client: GCE API client, project: a project, zone: the zone of the instance(s) being created, machine_type_name: The machine type of the instance being created. Returns: Nothing. Function acts as a bound checker, and will raise an exception from within the function if needed. Raises: utils.RaiseToolException if a custom machine type ratio is out of bounds. custom) machineTypeprojectzoneGet)requestserrors_to_collectzCould not fetch machine type:) error_messageN)messagesapitools_clientComputeMachineTypesGetRequest machineTypeslist MakeRequestsr RaiseToolException) compute_clientr7r8r1r=compute mt_get_pb mt_get_reqserrors_s r CheckCustomCpuRamRatiorJs  $ $(  * *' ""66%wT7CI((%;Invalid format: expected default or user@domain.com, received )emailscopes)rDEFAULT_SCOPES collections defaultdictrAsplitlenr,r.r$ EMAIL_REGEXmatchSCOPESgetextendServiceAccountsortedsix iteritemsappend) r=rOservice_accountaccounts_to_scopesrpartsaccount scope_uriress r CreateServiceAccountMessagesres{ ^  % %FO"..t4e KK E 5zQgi Uq  8 8    8 8   &- )) )#K,=,=o,N  8 8  J     $$Y >  "" )CJ&$7J!0<&.&M&MC'N'J#'%;J"+*2*;*;*+<+J' r"c.|j|||}|S)z-Create shieldedInstanceConfig message for VM.)enableSecureBoot enableVtpmenableIntegrityMonitoring)ShieldedInstanceConfig)r=enable_secure_boot enable_vtpmenable_integrity_monitoringshielded_instance_configs r #CreateShieldedInstanceConfigMessagergs+ &<<) ;== "!r"c*|j|}|S)z7Creates shieldedInstanceIntegrityPolicy message for VM.)updateAutoLearnPolicy)ShieldedInstanceIntegrityPolicy)r=update_auto_learn_policy"shielded_instance_integrity_policys r ,CreateShieldedInstanceIntegrityPolicyMessagerts&(0'O'O4(P(6$ ,+r"c 0|r|syddg}ddg}|jdd}|jdd}|r0||vr,tjdd |d d j|d |r1||vr,tjdd |d d j|d yy)aValidates flags specifying SVSM config. Args: svsm_args: The flags specifying SVSM config. support_snp_svsm: Whether SVSM is supported. Returns: Nothing. Function acts as a validator, and will raise an exception from within the function if needed. Raises: calliope_exceptions.RequiredArgumentException when the flags are not specified or are not valid. N EPHEMERAL NO_CC_TPM RESTRICTED UNRESTRICTEDtpmsnp-irqz --svsm-configz#Unexpected confidential TPM type: [z]. Legal values are [z, z].zUnexpected SEV SNP IRQ mode: [)rXr,r.join) svsm_argssupport_snp_svsm tpm_choicessnp_irq_choicesrsnp_irqs r ValidateSvsmConfigr~s * k*+!>2/ eT"# MM)T *'S #  6 6 -cU3 IIk " #2 '   /  6 6 ( 2 IIo & 'r + 0Wr"ct|dr|jdr|syt|j||jr|jj ddnd}|jr|jj ddnd}|j j |}|j j|}|j ||S)z2Create confidentialParavisorConfig message for VM. svsm_configNr!CONFIDENTIAL_TPM_TYPE_UNSPECIFIEDrSEV_SNP_IRQ_MODE_UNSPECIFIED)confidentialTpmType sevSnpIrqMode)hasattr IsSpecifiedrrrXConfidentialParavisorConfig"ConfidentialTpmTypeValueValuesEnumSevSnpIrqModeValueValuesEnum)argsr=rrrconfidential_tpm_typesev_snp_irq_modes r (CreateConfidentialParavisorConfigMessagers $ &d.>.>}.M  T%%'78    5"EF .    9&DE ) **MM  **GG   - -/$ . r"ctd}d}d}t|dr7|jdr&t|jtr |j}|rt|drx|jdrgt|j t jrC|jj|j }|sd|jjvrd}d}t|||}|||j||}|S||j|}|S|tjdd||j| }|S) z1Create confidentialInstanceConfig message for VM.Nconfidential_computeconfidential_compute_typeTDX)confidentialInstanceTypeconfidentialParavisorConfig)rz--confidential-compute-typezEConfidential compute type must be specified when using --svsm-config.)enableConfidentialCompute) rr isinstancerboolrr\ string_typesConfidentialInstanceConfig'ConfidentialInstanceTypeValueValuesEnumrr,r.) r=r!support_confidential_compute_type%support_confidential_compute_type_tdxr confidential_instance_config_msgenable_confidential_computeconfidential_instance_type!confidential_paravisor_config_msgs r !CreateConfidentialInstanceMessagers &*" $# d*+ -.**D1"&";";' d/0 23//1A1AB++ 0 0  * * , 2  / / 4 4 6%)!#' &N H&'#!, + 7'/'J'J!;$E(K($& *)"-'/'J'J!;(K($ *))4  6 6%   #.'/'J'J"=(K($ *)r"c |j} ||| _||| _||| _||| _||| _|.|jj |j| _||| _ ||| _ | S)z7Create AdvancedMachineFeatures message for an Instance.) AdvancedMachineFeaturesenableNestedVirtualizationthreadsPerCore numaNodeCountvisibleCoreCountenableUefiNetworking(PerformanceMonitoringUnitValueValuesEnumupperperformanceMonitoringUnitenableWatchdogTimer turboMode) r=enable_nested_virtualizationthreads_per_corenuma_node_countvisible_core_countenable_uefi_networkingperformance_monitoring_unitenable_watchdog_timer turbo_modefeaturess r $CreateAdvancedMachineFeaturesMessagers - - /(!-*FH'!.H ,H# 2H'$:H! ,)1)I)I)r)r#))+*H&H #H /r"c|tjjk(r*|j|d|t j |dS|j|d||dS)ajParses disk resources. Project and zone are ignored if a fully-qualified resource name is given, i.e. - https://compute.googleapis.com/compute/v1/projects/my-project /zones/us-central1-a/disks/disk-1 - projects/my-project/zones/us-central1-a/disks/disk-1 If project and zone cannot be parsed, we will use the given project and zone as fallbacks. Args: resources: resources.Registry, The resource registry name: str, name of the disk. project: str, project of the disk. zone: str, zone of the disk. type_: ScopeEnum, type of the disk. Returns: A disk resource. compute.regionDisksr7region collectionparams compute.disksr7r8)compute_scopes ScopeEnumREGIONParser ZoneNameToRegionName)rrr7r8type_s r ParseDiskResourcer/ss* n&&--- ?? (006     ?? "    r"c |j|jd}|r|S |j|jd}|r|S tj dj |j|j#tjtjf$rYwxYw#tjtjf$rYwxYw)aParses the source disk resource of an AttachedDisk. The source of an AttachedDisk is either a partial or fully specified URL referencing either a regional or zonal disk. Args: resources: resources.Registry, The resource registry attached_disk: AttachedDisk Returns: A disk resource. Raises: InvalidResourceException: If the attached disk source cannot be parsed as a regional or zonal disk. r)rrz^Unable to parse disk's source: [{0}] of device name: [{1}], try using `--device-name` instead.)rsourcecloud_resources WrongResourceCollectionExceptionRequiredFieldOmittedExceptionInvalidResourceExceptionr$ deviceName)r attached_diskdisks r !ParseDiskResourceFromAttachedDiskrVs"  ??)>  D k  ??=//O? LD k  00""(&     " "# 6633    6633    s" B B)#B&%B&)#CCc |rtt|Dcgc]}|jd||k(c}r|jds*tjt j ||S|jd|k7r5tjddj ||jd|jdScc}w)z4Helper method to get device-name for a disk message.rz device-namez--container-mount-diskz{Attempting to mount disk named [{}] with device-name [{}]. If being mounted to container, disk name must match device-name.) filterrrXrwarning&_DEFAULT_DEVICE_NAME_CONTAINER_WARNINGr$r,r.)rrcontainer_mount_diskds r GetDiskDeviceNamersf 2F G2FQQUU64 D (2F G 88M " kk8??EF k - D (  8 8 " J 6$/ 0   -   HsC c|tjjk(r |dk7rd}||d}n7d}t|}||d}n$|tjjk(rd}||d}|j |}|S)3Parses disk type reference based on location scope.rzcompute.diskTypesrzcompute.regionDiskTypesrr)rrZONEGetRegionFromZonerr) r disk_typer7locationrreplica_zone_cntrr disk_type_refs r ParseDiskTyper s n&&+++1&j"H5f,j"8,h"h7f ((///*J H 5F//Jv"7- r"cddj|jdddjS)z1Returns the GCP region that the input zone is in.-N)rrSlower)r8s r rrs) $**S/#2& ' - - //r"c<d}||d}|j|||}|S)rzcompute.storagePoolsrr)r)r storage_poolr7rrrstorage_pool_refs r ParseStoragePoolr(s4%* 1&__z&% r"c&td|DS)z=Returns True if the user has specified an existing boot disk.c3@K|]}|jddyw)bootFN)rX).0rs r z&UseExistingBootDisk..s 7TXXfe $s)any)diskss r UseExistingBootDiskr0s 7 7 77r"c\t|Dcgc]}|j|c}Scc}wN)r.r)rdestsdests r IsAnySpecifiedr5s*  7dt$ 7 88 7s)c|jdsy|j||tjjj }|j S)Nsource_instance_template) default_scope)rResolveAsResourcer compute_scoperGLOBALSelfLink)rrsource_instance_template_argrefs r GetSourceInstanceTemplater?sP  4 5 $66 IU%8%8%B%B%I%I 7 # r"c |duSr2)r7s r GetSkipDefaultsrBs " --r"c nd} |r!tj||j|} d} |r |j} d}t |dr |j }d}t |dr|j dr |j}d}t |dr|j dr |j}d}t |dr|j dr |j}d}t |dr|j dr |j}d}|rt |dr |j}d}|rt |dr |j}d}|r)t |d r|j d r |j}t|| }d}|rt |d r |j}d}|rt |d r |j }d}|r|j#d r |j$}d}|j#d rt |d r |j&}d}| r|j#dr |j(}d}| rt |dr |j*}|r$t-|dddds|s| s|s|s |s |s |s|s|s|syt/did|jd|j0d|j2d |d| d| d|d|d|d|d|d|d|d |d |d |d|d |d|d|S)z>Generate a Scheduling Message or None based on specified args.Nrrrrrrrrrrrrrrrirpr=rrrrA)sole_tenancy_util%GetSchedulingNodeAffinityListFromArgsr=rrrrrrrrrrrExtractGracefulShutdownFromArgsrrIsKnownAndSpecifiedrrrrr5rrirp)rclient skip_defaultssupport_node_affinitysupport_min_node_cpusupport_node_project"support_host_error_timeout_secondssupport_max_run_duration"support_local_ssd_recovery_timeoutsupport_graceful_shutdownsupport_skip_guest_os_shutdown"support_preemption_notice_durationrrrfreeze_durationrrrrrrrrrrrrrs r GetSchedulingrTs/'MM foo35O,$$L- T?#&&M/ T01d6F6F#7%66O  "&"2"23I"J44 d() +,00 $ d12 45"&"B"B#'G (-*!%!@!@'$0B"C,,#'G (-*.2.>.> &/(!%!@!@5 %'$0B"C,,04-' 9# 880  $223GH00 34 !:22#(@(@)"88#'G (-"&!@!@  '    !("((    00 "" ,   &     " #2 0 , #> "< ( ( "<  .! "*# $3^% &4' ("<) r"c|jrd}n |j}|rt|ddddsgSt|j|j rg|S|j |S)NrO no_scopesr_no_service_account)r=rOr_)rWr_r5rer=rVrO)rrHrIr_s r GetServiceAccountsrXjsl O**ON Hk#46JL I %>>R% '''+{{% ''r"ctj|j|j|j}t j ||S)Nmetadatametadata_from_file)r ConstructMetadataMessager=r[r\rValidateUserMetadata)rrH user_metadatas r GetValidatedMetadatar`xs? 99 oo}}002-'' 6 r"c|rt|ddsytj|j|j|j S)Nr[r\rZ)r5r r]r=r[r\)rrHrIs r GetMetadatarbs? z+? @   2 222 44r"ctj|j}tj||j|Sr2)r BytesToGbboot_disk_sizeWarnIfDiskSizeIsTooSmallboot_disk_type)rboot_disk_size_gbs r GetBootDiskSizeGbris4ood&9&9:  !2D4G4GH r"ctjj||jt j |}t j|}|j||S)N) scope_lister) r INSTANCES_ARGr9r compute_flagsGetDefaultScopeListerr ZoneResourceFetcherWarnForZonalCreation)rrHholder instance_refszone_resource_fetchers r GetInstanceRefsrts_%%77   66v>8@- %88@,,]; r"c|j||j}tjj |j d}tj |||j}|S)NF)allow_rsa_encrypted)r9rr CsekKeyStoreFromFile"source_machine_image_csek_key_fileMaybeLookupKeyMessager>)r source_imagerDrqmachine_image_ref csek_keysdisk_key_or_nones r GetSourceMachineImageKeyrsh"44T6;K;KL%%.. --5/J)55"N$B$BD r"c(| xst|dddS)Nr'rr/)r5rrIs r CheckSpecifiedMachineTypeArgsrs"  N ~|_ MOr"cXt||}t||||t|||||}|S)z@Create a machine type URI for given args and instance reference.)CreateMachineTypeNamerJParseMachineType) rrDresource_parserr7rrr0r1machine_type_uris r CreateMachineTypeUrirsA,D2FG(|j 2t tj|j j}|S)z1Returns the CONFIDENTIAL_VM_TYPES of the machine.Nrr)rrrCONFIDENTIAL_VM_TYPESSEVrrr)rrr0s r GetConfidentialVmTypers} ,-$2K2K$::>>'   6 7  ( ( 4"9#B#B#'#A#A#G#G#IK r"cB|r|jdsy|jS)Ncan_ip_forward)rrrs r GetCanIpForwardrs"4++,<=   r"ch|jr&|jj|jSy)N)items)tagsr=Tags)rrHs r GetTagsrs( YY ??  dii  00 r"c R|jjj}|r |jjj}|jrS|t t j|jDcgc]\}}|j||c}}Sycc}}w)z%Gets labels for the instance message.keyvalueadditionalPropertiesN) r=Instance LabelsValueInstancePropertieslabelsr[r\r]AdditionalProperty)rrHinstance_properties labels_valuerrs r GetLabelsrs))55,??55AAL [[  t{{!;<.DDFJ6.>/%d&<&<=t564;K;K(<  "*D,O,OP ,0+N+N-( r"c |jj}|jdrtj|j }|n|jjj }|ttj|Dcgc]\}}|j||c}}|_ |jdrmt|dr |jdr|jdk7rtj dd|jj#|j$ |_|Scc}}w) z)Create a Params message for the instance.resource_manager_tagsrrrequest_valid_for_durationr FLEX_STARTz--request_valid_for_durationzS[--request_valid_for_duration] is only supported for FLEX_START provisioning model.rq)r=InstanceParamsrGrGetResourceManagerTagsrResourceManagerTagsValuer[r\r]rresourceManagerTagsrrrr,r.rzrrequestValidForDuration)rrHrret_resource_manager_tagsresource_manager_tags_valuerrs r CreateParamsrsB ?? ) ) +& 56#::  & &  !, // ( ( A A"$? !'s}}5N'O P  !Q*#u*<<=!Q  $f  :; D. / 45  " "l 2  8 8 ( !  &,__%=%=//&>&F" -1 sD; z'compute.googleapis.com/reservation-name)FF)TFN)NNNNNNNNNNNNNNNN)T)NNNNNNNN)r) FTFTFFFFFr2)F)S__doc__ __future__rrrrQrgooglecloudsdk.api_lib.computerrrr r r googlecloudsdk.callioper r,"googlecloudsdk.command_lib.computer rmrrr,googlecloudsdk.command_lib.compute.instances/googlecloudsdk.command_lib.compute.sole_tenancyrrDgooglecloudsdk.corerrr googlecloudsdk.core.utilrr\compilerUrr!r(r3rJrerkrrrrrrrrrrr rr(r0r5r?rBrTrXr`rbrirtrrrrrrrrrrrrrrrFrrrAr"r rsO&' 4;5905EEJF>U#<* bjjNO =' 04"!&.2 ;|AD* Z $ $##04#)nb "KO,#LD8*z"& $+\$ N-`!,FG(0 8 9. '+"',##(',Nb '4 O/3 &*      &*Z *(VFr"