.5dZddlmZddlmZddlmZddlmZddlmZddl m Z ddl m Z dd l mZdd lmZdd lmZdd lmZdd lmZddlmZddlmZddlmZddlZdZdZGddej:ZGddej:ZGddeZ dZ!dZ"dZ#dZ$dZ%dZ&d Z'd!Z(d,d"Z)d#Z*d$Z+d%Z,d&Z-d,d'Z.d(Z/d)Z0d*Z1d-d+Z2y).z4Command line processing utilities for access levels.)absolute_import)division)unicode_literals)encoding)util)waiter)base)concepts)common)policies) arg_utils)concept_parsers) exceptions) resources)yamlN0accesscontextmanager.accessPolicies.accessLevelsa Invalid format: {} The valid fields for the YAML objects in this file type are [{}]. For an access level condition file, an example of the YAML-formatted list of conditions will look like: - ipSubnetworks: - 162.222.181.197/24 - 2001:db8::/48 - members: - user:user@example.com For access levels file, an example of the YAML-formatted list of access levels will look like: - name: accessPolicies/my_policy/accessLevels/my_level title: My Level description: Level for foo. basic: combiningFunction: AND conditions: - ipSubnetworks: - 192.168.100.14/24 - 2001:db8::/48 - members: - user1:user1@example.com ceZdZfdZxZS)ParseResponseErrorcJtt| dj|y)NzIssue parsing response: {})superr__init__format)selfreason __class__s =lib/googlecloudsdk/command_lib/accesscontextmanager/levels.pyrzParseResponseError.__init__Fs"  5<?$>qAFF$>L?   5==dii - /0@sA!rr#s@rr)r)Rs 00rr)c tj|S#tj$r }t|dj |d}~wtj $r }t|dj |d}~wwxYw)NzProblem loading file: {}z Problem parsing data as YAML: {})r load_path FileLoadErrorr%rYAMLParseError)r'errs r _LoadDatar8[sqK >>$   C T5<r)rr/r@)r'exprs r"_ValidateAllCustomFieldsRecognizedrGpsO !!#  )00  ( ( *2,-.24j ::$rct}|D]2}|js|j|j4|r7t|dj dj |t |dyr:r<)r'levelsrBlevels r!_ValidateAllLevelFieldsRecognizedrKwste $$&  !>!>!@A  #**4995H+IJ VAY rcfd}|S)zFWrapper around ParseReplaceAccessLevelsResponse to accept api version.cDtj}tjj |j d}t j|j|j|}tj||dj|jS)a~Parse the Long Running Operation response of the ReplaceAccessLevels call. Args: lro: Long Running Operation response of ReplaceAccessLevels. unused_args: not used. Returns: The replacement Access Levels created by the ReplaceAccessLevels call. Raises: ParseResponseError: if the response could not be parsed into the proper object. versionzaccesscontextmanager.operations) collectionz0Waiting for Replace Access Levels operation [{}])r GetClientrREGISTRYParser-r BulkAPIOperationPolleraccessPolicies_accessLevels operationsrWaitForrName)lro unused_argsclient operation_refpoller api_versions r)VersionedParseReplaceAccessLevelsResponsezSParseReplaceAccessLevelsResponse..VersionedParseReplaceAccessLevelsResponses^^K 0F&&,, >-@M  * *6+M+M+1+<+> :AA     " ##r)r^r_s` r ParseReplaceAccessLevelsResponseras#2 32rcfd}|S)6Wrapper around ParseCustomLevel to accept api version.c^tj|}|s t|dtj}|j } |Dcgc]}t j||}}t|||Scc}w#t$r%}t|tj||d}~wwxYw)a Parse a YAML representation of basic level conditions. Args: path: str, path to file containing basic level conditions Returns: list of Condition objects. Raises: ParseError: if the file could not be read into the proper object File is emptyrNN) rr4r%r GetMessages Conditionr DictToMessage Exceptionr)six text_typerD)r'datamessagesr0crAr7r^s r"VersionedParseBasicLevelConditionszEParseBasicLevelConditions..VersionedParseBasicLevelConditionss >>$ D  t_ -- 4H&&MHFJKdH**1m A9)A>9A>> B, B''B,r`)r^ros` rParseBasicLevelConditionsrqs8 ,+rcfd}|S)rcc:tj|}|s t|dtj}|j } t j||}t|||S#t$r%}t|tj||d}~wwxYw)a Parse a YAML representation of custom level conditions. Args: path: str, path to file containing custom level expression Returns: string of CEL expression. Raises: ParseError: if the file could not be read into the proper object rerNN) rr4r%rrfExprrrhrir)rjrkrG)r'rlrmr0rFr7r^s rVersionedParseCustomLevelz3ParseCustomLevel..VersionedParseCustomLevels >>$ D  t_ -- 4HMMMH  # #D- 8d'tT2 K H tS]]3%7 GGHsA,, B5 BBr`)r^rus` rParseCustomLevelrvs6 #"rcfd}|S)z7Wrapper around ParseAccessLevels to accept api version.c^tj|}|s t|dtj}|j } |Dcgc]}t j||}}t|||Scc}w#t$r%}t|tj||d}~wwxYw)a4Parse a YAML representation of a list of Access Levels with basic/custom level conditions. Args: path: str, path to file containing basic/custom access levels Returns: list of Access Level objects. Raises: ParseError: if the file could not be read into the proper object rerNN) rr4r%rrf AccessLevelrrhrir)rjrkrK)r'rlrmr0rnrIr7r^s rVersionedParseAccessLevelsz5ParseAccessLevels..VersionedParseAccessLevelss >>$ D  t_ -- 4H((MHBFG$Q&&q-8$fG&dF3 M H H tS]]3%7 GGHrpr`)r^rzs` rParseAccessLevelsr{s6 $#rch~||S|jds|jjd|S)zFClear basic field (and default combine function) if spec not provided.basic_level_specbasic) IsSpecified accessLevelreset)refargsreqs r(ClearCombiningFunctionUnlessBasicSpecSetrs5 [ J  , -OO'" *rc0tjddS)NrJzThe ID of the access level.)r- help_text)r ResourceParameterAttributeConfigr`rrGetAttributeConfigrs  2 2 ; ==rchtjddtjtS)NrrJ) resource_nameaccessPoliciesIdaccessLevelsId)r ResourceSpecr rr`rrGetResourceSpecrs-   8224')  ++rctjjdtdj |dj |y)Add a resource argument for an access level. NOTE: Must be used only if it's the only resource arg in the command. Args: parser: the parser for the command. verb: str, the verb to describe the resource, such as 'to update'. rJThe access level {}.TrequiredNr ConceptParser ForResourcerr AddToParserparserverbs rAddResourceArgrsC++ ##D) ,![(rctjjdtdj |dj |y)rz--levelrTrNrrs rAddResourceFlagArgr/sC++##D) ,![(rctjdtj|jj dddddS) Nz--combine-functionrNandor)ANDORFz:For a basic level, determines how conditions are combined.)custom_mappingsrhelp_str)r ChoiceEnumMapperrrf BasicLevel CombiningFunctionValueValuesEnumr^s rGetCombineFunctionEnumMapperr?sG  # # )z*J*JK  rctjdtjdg}|D]}|j|y)z1Add common args for level create/update commands.z access levelN)r GetDescriptionArg GetTitleArgr)rrargs r AddLevelArgsrMs? ~. ( $cOOFrcd}tjd|t|}t|j}|j ||j |y)z.Add args for basic spec (with no custom spec).asPath to a file containing a list of basic access level conditions. An access level condition file is a YAML-formatted list of conditions, which are YAML objects representing a Condition as described in the API reference. For example: ``` - ipSubnetworks: - 162.222.181.197/24 - 2001:db8::/48 - members: - user:user@example.com ```--basic-level-spechelpr@rN)r Argumentrqr choice_argr)rr^basic_level_help_textbasic_level_spec_argbasic_level_combine_args rAddBasicSpecArgsrWs`  $[ 139)z""6*%%f-rcd}d}tjd|t|}t|j}tj d}|j ||j |tjd|t|}tj d }|j |tj d d } | j || j || j|y )z7Add args for basic and custom specs (grouped together).arPath to a file containing a list of basic access level conditions. An access level condition file is a YAML-formatted list of conditions,which are YAML objects representing a Condition as described in the API reference. For example: ``` - ipSubnetworks: - 162.222.181.197/24 - 2001:db8::/48 - members: - user:user@example.com ```zPath to a file representing an expression for an access level. The expression is in the Common Expression Langague (CEL) format.For example: ``` expression: "origin.region_code in ['US', 'CA']" ```rrrzBasic level specification.)rz--custom-level-speczCustom level specification.zLevel specification.T)rmutexN) r rrqrr ArgumentGroup AddArgumentrvr) rr^rcustom_level_help_textrrbasic_level_spec_groupcustom_level_spec_argcustom_level_spec_grouplevel_spec_groups rAddBasicAndCustomSpecArgsrps  $[ 139)z --3OP$$%9:$$%<=-- ! K (*!.. (*%%&;<''-C4P5667v&rcb|i}|jddr t||yt||y)z/Add arguments for in-file level specifications.N custom_levelsF)getrr)rr^ feature_masks rAddLevelSpecArgsrs1Lou-fk2V[)r)N)NN)3__doc__ __future__rrrapitools.base.pyr+googlecloudsdk.api_lib.accesscontextmanagerrgooglecloudsdk.api_lib.utilrgooglecloudsdk.callioper googlecloudsdk.calliope.conceptsr /googlecloudsdk.command_lib.accesscontextmanagerr r $googlecloudsdk.command_lib.util.apisr (googlecloudsdk.command_lib.util.conceptsrgooglecloudsdk.corerrrrj COLLECTIONr.Errorrr%r)r8rDrGrKrarqrvr{rrrrrrrrrrr`rrrs;&'%<.(5BD:D*)$ ? :F))FM!!M00K : 3>,D#B$B  = + ) ) .21'h*r