.dZddlmZddlmZddlmZddlmZddlmZddlm Z ddl m Z dd l mZdd lmZd Zd Zd ZdZdZdZdZdZdZdZdZdZdZdZy)z3Flags and helpers for the Assured related commands.)absolute_import)division)unicode_literals) message_util) arg_parsers)base) resource_args) arg_utils)concept_parserscT|jddd|jdddy)N --locationTzThe location of the Assured Workloads environments. For a current list of supported LOCATION values, see [Assured Workloads locations](https://cloud.google.com/assured-workloads/docs/locations).requiredhelp--organizationz^The parent organization of the Assured Workloads environments, provided as an organization ID. add_argumentparsers /lib/googlecloudsdk/command_lib/assured/flags.pyAddListWorkloadsFlagsrA I    , cT|jddd|jdddy)Nr TzThe location of the Assured Workloads operations. For a current list of supported LOCATION values, see [Assured Workloads locations](https://cloud.google.com/assured-workloads/docs/locations).rrz\The parent organization of the Assured Workloads operations, provided as an organization ID.rrs rAddListOperationsFlagsr2rrct|jddd|jddd|jdd |jd dd tjd tj|d ddj j |tjdtj|ddj j ||jdtjdtidd|jddd|jddd|jdd |jd!d" |jd#tjdd$|jd%d& |jd'tdd()t||y*)+zAdds required flags to the assured workloads create command. Args: parser: Parser, Parser used to construct the command flags. release_track: ReleaseTrack, Release track of the command being called. Returns: None. r TzThe location of the new Assured Workloads environment. For a current list of supported LOCATION values, see [Assured Workloads locations](https://cloud.google.com/assured-workloads/docs/locations).rrz`The parent organization of the new Assured Workloads environment, provided as an organization IDz--external-identifierz@The external identifier of the new Assured Workloads environmentr--display-namez9The display name of the new Assured Workloads environmentz--compliance-regimec |dk7S)NCOMPLIANCE_REGIME_UNSPECIFIEDregimes rz(AddCreateWorkloadFlags..os F.M$Mrz>The compliance regime of the new Assured Workloads environment)include_filterrhelp_strz --partnerc |dk7S)NPARTNER_UNSPECIFIEDr!r"s rr$z(AddCreateWorkloadFlags..vs F.C$CrzNThe partner choice when creating a workload managed by local trusted partners.)r%r&z--partner-permissionszdata-logs-viewerspec KEY=VALUEzXThe partner permissions for the partner regime, for example, data-logs-viewer=true/falsetypemetavarrz"--partner-services-billing-accountFa6Billing account necessary for purchasing services from Sovereign Partners. This field is required for creating SIA/PSN/CNTXT partner workloads. The caller should have 'billing.resourceAssociations.create' IAM permission on this billing-account. The format of this string is billingAccounts/AAAAAA-BBBBBB-CCCCCCz--billing-accountzoThe billing account of the new Assured Workloads environment, for example, billingAccounts/0000AA-AAA00A-A0A0A0z--next-rotation-timezuThe next rotation time of the KMS settings of new Assured Workloads environment, for example, 2020-12-30T10:15:30.00Zz--rotation-periodzfThe rotation period of the KMS settings of the new Assured Workloads environment, for example, 172800s--labelszmThe labels of the new Assured Workloads environment, for example, LabelKey1=LabelValue1,LabelKey2=LabelValue2z--provisioned-resources-parentzHThe parent of the provisioned projects, for example, folders/{FOLDER_ID}z--enable-sovereign-controlszIf true, enable sovereign controls for the new Assured Workloads environment, currently only supported by EU_REGIONS_AND_SUPPORT)r-defaultrN) rr ChoiceEnumMapperrGetComplianceRegimesEnum choice_arg AddToParserGetPartnersEnumrArgDictbool_AddResourceSettingsFlagr release_tracks rAddCreateWorkloadFlagsr;Gs  I    +   M  F  ++M:MO  J{{6" ""=1C  J{{6"    $    )  * 2    :   H  8      8  &  #  L 6=1rc 8|tjjk(rD|jdt j t t t t t dddy |jdt j t t t dddy ) zAdds the resource settings flag to the assured workloads create command. Args: parser: Parser, Parser used to construct the command flags. release_track: ReleaseTrack, Release track of the command being called. Returns: None. z--resource-settings)zconsumer-project-idzconsumer-project-nameencryption-keys-project-idencryption-keys-project-name keyring-idr)r+aA comma-separated, key=value map of custom resource settings such as custom project ids, for example: consumer-project-id={CONSUMER_PROJECT_ID} Note: Currently only consumer-project-id, consumer-project-name, encryption-keys-project-id, encryption-keys-project-name and keyring-id are supported. The encryption-keys-project-id, encryption-keys-project-name and keyring-id settings can be specified only if KMS settings are providedr,)r=r>r?aA comma-separated, key=value map of custom resource settings such as custom project ids, for example: consumer-project-id={CONSUMER_PROJECT_ID} Note: Currently only encryption-keys-project-id, encryption-keys-project-name and keyring-id are supported. The encryption-keys-project-id, encryption-keys-project-name and keyring-id settings can be specified only if KMS settings are providedN) calliope_base ReleaseTrackGArrr6strr9s rr8r8sm00333   '*),.103!   ;0   .103!  ;rcDt|d|jddy)Ndeleteverb--etagzPThe etag acquired by reading the Assured Workloads environment or AW "resource".r)AddWorkloadResourceArgToParserrrs rAddDeleteWorkloadFlagsrJs' h7 rct|dyNdescriberFrIrs rAddDescribeWorkloadFlagsrO s  j9rct|dyrL)AddViolationResourceArgToParserrs rAddDescribeViolationFlagsrRs !&z:rct|dy)Nzenable-resource-monitoringrFrNrs r AddEnableResourceMonitoringFlagsrTs  .JKrct|d|jdd|jdd}|jd d |jd d |jd dtjdy)z$Method to add update workload flags.updaterFrHzOThe etag acquired by reading the Assured Workloads environment before updating.rTzBSettings that can be updated on the Assured Workloads environment.rrz:The new display name of the Assured Workloads environment.z!--violation-notifications-enabledz>The notification setting of the Assured Workloads environment.r/r+zmThe new labels of the Assured Workloads environment, for example, LabelKey1=LabelValue1,LabelKey2=LabelValue2)r.r-rN)rIr add_grouprr6)rupdatable_fieldss rAddUpdateWorkloadFlagsrYs h7 %% O& G ) K      8  rctjjdtjddj |y)N operationz5The Assured Workloads operation resource to describe.Tr)r ConceptParser ForResourcer GetOperationResourceSpecr4rs rAddDescribeOperationFlagsr`8s<++,,.= , Krctjjdtjdj |dj |y)Nworkloadz1The Assured Workloads environment resource to {}.Tr\)r r]r^r GetWorkloadResourceSpecformatr4rrGs rrIrIAsG++++-9@@F , Krctjjdtjdj |dj |y)N violationz/The Assured Workloads violation resource to {}.Tr\)r r]r^r GetViolationResourceSpecrdr4res rrQrQJsG++,,.7>>tD , KrcBt||jdddy)z$Method to add list violations flags.z --workloadTzQThe parent workload of the Assured Workloads violations, provided as workload ID.rN)rrrs rAddListViolationsFlagsrjSs( % rclt|d|jddd|jdd y ) z+Method to add acknowledge violations flags. acknowledgerFz --commentTz=Business justification used added to acknowledge a violation.rz--acknowledge-typeathe acknowledge type for specified violation, which is one of: SINGLE_VIOLATION - to acknowledge specified violation, EXISTING_CHILD_RESOURCE_VIOLATIONS - to acknowledge specified org policy violation and all associated child resource violations.rN)rQrrs rAddAcknowledgeViolationsFlagsrm`sF!&}= J   ArN)__doc__ __future__rrrgooglecloudsdk.api_lib.assuredrgooglecloudsdk.callioperrr@"googlecloudsdk.command_lib.assuredr $googlecloudsdk.command_lib.util.apisr (googlecloudsdk.command_lib.util.conceptsr rrr;r8rJrOrRrTrYr`rIrQrjrmr!rrrusp:&'7/9<:D**}2@6r:;LB r