\dZddlmZddlmZddlmZddlmZddlmZddl m Z ddl m Z dd l mZdd l mZdd lmZdd lmZdd lmZdd lmZej,ZGddej.ZdZdZd8dZdZdZd8dZ d9dZdZ dZ!dZ"dZ#dZ$dZ%dZ&dZ'd Z(d!Z)d"Z*d#Z+d$Z,d%Z- d:d&Z.d'Z/d(Z0 d8d)Z1d*ed+ed,ed-e2d.e2d/e2d0dfd1Z3d2Z4d3Z5d4Z6d5Z7d6Z8d7Z9y);zACode that's shared between multiple backend-services subcommands.)absolute_import)division)unicode_literals)Any)encoding)poller)waiter)base) exceptions)reference_utils)log) propertiesceZdZfdZxZS)CacheKeyQueryStringExceptionc,tt| dy)Nzcache-key-query-string-whitelist and cache-key-query-string-blacklist may only be set when cache-key-include-query-string is enabled.)superr__init__)self __class__s Qlib/googlecloudsdk/command_lib/compute/backend_services/backend_services_utils.pyrz%CacheKeyQueryStringException.__init__&s &6 56)__name__ __module__ __qualname__r __classcell__)rs@rrr$s 66rrctjjjj }|t j dyy)z?Warns if core/default_regional_backend_service property is set.NzPcore/default_regional_backend_service property is deprecated and has no meaning.)rVALUEScore default_regional_backend_serviceGetBoolr warning)default_regionals r8IsDefaultRegionalBackendServicePropertyNoneWarnOtherwiser#.sC==EEG!KK "rcty)z0Gets the default compute flags scope enum value.N)r#rrGetDefaultScoper&:s :< rNc|jd}i}|D]o}|sd|vr|jdd\}}nd}d}|dvr)||vrtjdd||z|||<Rtjdd ||z|r|stjdd d |vrd |vrtjdd |j}d |vrd|_n'd |vrd|_n|d|_n|j|_d|vsd|vrZ|j d|_|j d|_|j r |jstjdd|S)z$Returns IAP settings from arguments.,=TcHt|}|jdr|dd}|S)Nur*)repr startswith)srs r_ReprzGetIAP.._ReprQs' q'a c  abE hr)enableddisabledoauth2-client-idoauth2-client-secretz--iapz(Sub-argument %s specified multiple timeszInvalid sub-argument %sz(Must provide value when specifying --iapr2r3z0Must specify only one of [enabled] or [disabled]Fr4r5zMBoth [oauth2-client-id] and [oauth2-client-secret] must be specified together)splitr InvalidArgumentExceptionBackendServiceIAPr2getoauth2ClientIdoauth2ClientSecret) iap_argmessagesexisting_iap_settingssubargsiap_arg_parsedsubargvaluer1 iap_settingss rGetIAPrD@s MM# '.f  f}ll3*mfee ** > !11 ?%-OQ Q$nV  / / ,uV}< >>-2 w  - -; ==. Z>%A  - -C EE++-,. L^# L$ L088LN*."0"4"45G"HL&4&8&89O&PL#  & &l.M.M  / /    rcy)NzIAP only protects requests that go through the Cloud Load Balancer. See the IAP documentation for important security best practices: https://cloud.google.com/iap/r%r%rrIapBestPracticesNoticerFs *rcy)NzIAP has been enabled for a backend service that does not use HTTPS. Data sent from the Load Balancer to your VM will not be encrypted.r%r%rrIapHttpWarningrHs Orcd}|jrX|jd}n0|jd}n!|tjk(r|j d}|t j|dy|jrX|jd}n0|jd}n!|tjk(r|jd}|t j|d yy) zHValidate if the group arg is used with the correct group specific flags.N--max-rate-per-endpoint--max-connections-per-endpoint%--max-in-flight-requests-per-endpointz#cannot be set with --instance-group--max-rate-per-instance--max-connections-per-instance%--max-in-flight-requests-per-instancez+cannot be set with --network-endpoint-group) instance_groupmax_rate_per_endpointmax_connections_per_endpoint ReleaseTrackALPHA#max_in_flight_requests_per_endpointr r7network_endpoint_groupmax_rate_per_instancemax_connections_per_instance#max_in_flight_requests_per_instance)args release_track invalid_args r_ValidateGroupMatchesArgsr]s+  !!--k * * 64k+++  4 4 @;k  / / <  "" !!--k * * 64k+++  4 4 @;k  / / D #rc|jj}|}|jr||j}d}d}|tjk(rG|j r;|jj }|jj |j }t||d}||jk(r|jd}n,|jd}n|jd}n|jd}|tjk(rB|jd}n3|j d}n#|j d}n|||j k(rd }|t#j$|d y||j&k(r|jd}n,|j(d }n|j*d }n|j,d }|tjk(rB|jd}n3|j d}n#|j d}n|||j k(rd }|t#j$|dy||j.k(r#|j0t#j$ddy|tjk(r||j2k(r|j(d }n\|j*d }nM|j,d }n>|jd}n/|jd}n |jd}n||j k7rd}|t#j$|dyyy)aCheck whether the setup of the backend LB related fields is valid. Args: messages: API messages class, determined by release track. add_or_update_backend_args: argparse Namespace. The arguments provided to add-backend or update-backend commands. current_balancing_mode: BalancingModeValueValuesEnum. The balancing mode of the existing backend, in case of update-backend command. Must be None otherwise. release_track: The release track of the command. Nz--max-utilizationz--max-connectionsrNrKz--max-in-flight-requestsrOrLz--traffic-duration=LONGz&cannot be set with RATE balancing modez --max-raterMrJz,cannot be set with CONNECTION balancing modez--network-endpoint-groupz-cannot be set with UTILIZATION balancing modez5--traffic-duration=TRAFFIC_DURATION_UNSPECIFIED/SHORTz+cannot be set with IN_FLIGHT balancing mode)BackendBalancingModeValueValuesEnumbalancing_moderSrTtraffic_durationTrafficDurationValueValuesEnumr]RATEmax_utilizationmax_connectionsrXrRmax_in_flight_requestsrYrULONGr r7 CONNECTIONmax_raterWrQ UTILIZATIONrV IN_FLIGHT) r=add_or_update_backend_argscurrent_balancing_moder[balancing_mode_enumrarbtraffic_duration_enumr\s rValidateBalancingModeArgsrqsg"!((EE)...("113N|))) $ 5 5$,,KK''FF"336 F+*///!11='k # 3 3 ?'k # @ @ L4k # @ @ L4k *** # : : F0 $ H H > $ H H >  +"7"<"<</   / / ? AA,777!11='k # , , 8 k # 9 9 E-k # 9 9 E-k *** # : : F0 $ H H > $ H H >  +"7"<"<</   / / E GG,888!88D  / / $ 9 E |))) /99 9!**6 k # 9 9 E-k # 9 9 E-k # 3 3 ?'k # @ @ L4k # @ @ L4k 277 7Kk  / / D # :*rc|j|j|_|j|j|_|j+|j|_|jsg|_g|_|j|j|_d|_g|_|j|j|_d|_g|_|j|j|_ |j|j|_ yy)zSets the cache_key_policy according to the command line arguments. Args: args: Arguments specified through command line. cache_key_policy: new CacheKeyPolicy to be set (or preexisting one if using update). NT)cache_key_include_protocolincludeProtocolcache_key_include_host includeHostcache_key_include_query_stringincludeQueryStringqueryStringWhitelistqueryStringBlacklist cache_key_query_string_whitelist cache_key_query_string_blacklistcache_key_include_http_headerincludeHttpHeaderscache_key_include_named_cookieincludeNamedCookies)rZcache_key_policys rUpdateCacheKeyPolicyr.s  $$0'+'F'F$   ,#'#>#>  ((4*.*M*M'  . ..0+.0+ **6 --**.',.) **6 --**.',.) ''3*.*L*L' ((4+/+N+N(5rc|jduxs |j}|s#|j |j tyyN)rwr{r|r)cache_key_policy_argsinclude_query_strings rValidateCacheKeyPolicyArgsrOsV::dB;:: >>J>>J ( ** K rc|j xsh|j xsY|j xsJ|jdxs7|jdxs$|jdxs|jdS)aReturns true if create request requires a CacheKeyPolicy message. Args: args: The arguments passed to the gcloud command. Returns: True if there are cache key policy related arguments which require adding a CacheKeyPolicy message in the create request. r{r|r}r)rursrw IsSpecifiedrZs rHasCacheKeyPolicyArgsForCreaterZs )) ) =-- - =11 1 =   = > =   = >  =   : ;  =   ; < >rc$|jdS)zReturns true if request requires a Subsetting message. Args: args: The arguments passed to the gcloud command. Returns: True if request requires a Subsetting message. subsetting_policyrrs rHasSubsettingArgsrss   - ..rc$|jdS)zReturns true if request requires a Subsetting.subset_size field. Args: args: The arguments passed to the gcloud command. Returns: True if request requires a Subsetting.subset_size field. subsetting_subset_sizerrs rHasSubsettingSubsetSizeArgsrs   2 33rc$|jdS)zReturns true if request requires an IP address selection policy. Args: args: The arguments passed to the gcloud command. Returns: True if request requires an IP address selection policy. ip_address_selection_policyrrs rHasIpAddressSelectionPolicyArgsrs   7 88rc|jdxsp|jdxs]|jdxsJ|jdxs7|jdxs$|jdxs|jdS)aReturns true if update request requires a CacheKeyPolicy message. Args: args: The arguments passed to the gcloud command. Returns: True if there are cache key policy related arguments which require adding a CacheKeyPolicy message in the update request. rsrurwr{r|r}rrrs rHasCacheKeyPolicyArgsForUpdaters   7 8 =   3 4 =   ; < =   = > =   = >  =   : ;  =   ; < >rc|jj}|j,|jj|jj}t |t |||S)aqValidates and returns the cache key policy. Args: client: The client used by gcloud. args: The arguments passed to the gcloud command. backend_service: The backend service object. If the backend service object contains a cache key policy already, it is used as the base to apply changes based on args. Returns: The cache key policy. )r=CacheKeyPolicy cdnPolicycacheKeyPolicyrr)clientrZbackend_servicers rGetCacheKeyPolicyrs`__335+..:&00??T"t-. rci}t|}|rN|jjj|j|d<|rt |r|j |d<|r"|jjdi||_yy)aApplies the Subsetting argument(s) to the specified backend service. Args: client: The client used by gcloud. args: The arguments passed to the gcloud command. backend_service: The backend service object. use_subset_size: Should Subsetting.subset_size be used? policy subsetSizeNr%)rr= SubsettingPolicyValueValuesEnumrrr subsetting)rrZruse_subset_sizesubsetting_argsadd_subsettings rApplySubsettingArgsrs/$T*.OO..DD  " "$6t<&*&A&Aol#!;!;!;!No!NOrct|r5|jjj|j|_yy)zApplies the IP address selection policy argument to the backend service. Args: client: The client used by gcloud. args: The arguments passed to the gcloud command. backend_service: The backend service object. N)rr=BackendService'IpAddressSelectionPolicyValueValuesEnumripAddressSelectionPolicyrrZrs r!ApplyIpAddressSelectionPolicyArgsrs:%T*&&NN  , , ,+rc|j|jdk(rG|j|jj |_|j|j_n|jdk(r|j |jj|_|j j)|jj|j _|j|j j_|j|jdk(r|j|jj |_|jj)|jj|j_ |j|jj_ n|j|_|j|jdk(rG|j|jj |_|j|j_y|jdk(r|j |jj|_|j j)|jj|j _|j|j j_yyy)aApplies the --affinity-cookie-name and --affinity-cookie-ttl arguments to the backend service. The values are written into the backend_service message as follows: - HTTP_COOKIE: name copied into backend_service.hashPolicy.httpCookie.name, TTL copied into backendService.affinityCookieTtlSec. - GENERATED_COOKIE: TTL copied into backendService.affinityCookieTtlSec. - STRONG_COOKIE_AFFINITY: name copied into backendService.strongSessionAffinityCookie.name, TTL copied into backendService.strongSessionAffinityCookie.ttl. (STRONG_COOKIE_AFFINITY does not fall back to affinityCookieTtlSec the same way HTTP_COOKIE does.) Args: client: The client used by gcloud. args: The arguments passed to the gcloud command. backend_service: The backend service object. NSTRONG_COOKIE_AFFINITY HTTP_COOKIE)affinity_cookie_namesession_affinitystrongSessionAffinityCookier=BackendServiceHttpCookienameconsistentHash"ConsistentHashLoadBalancerSettings httpCookie,ConsistentHashLoadBalancerSettingsHttpCookieaffinity_cookie_ttlttlDurationsecondsaffinityCookieTtlSecaffinity_cookie_pathpathrs rApplyAffinityCookieArgsrsd$ *  88  4 4 < OO 4 4 6 3  # #116   - /  ' ' / OO > > @ &  ' ' 2 2 : OO H H J &&18<7P7Po$$//4 )  88  4 4 < OO 4 4 6 3  4 4 8 8 @ OO $ $ & 337  " "1155=.2-E-Eo* *  88  4 4 < OO 4 4 6 3  # #116   - /  ' ' / OO > > @ &  ' ' 2 2 : OO H H J &&18<7P7Po$$//4 0+rc6d}|jrRg}|jjD]1\}}|j|jj ||3|S|j ,|j j |j j }|S)axReturns the negative caching policy. Args: client: The client used by gcloud. args: The arguments passed to the gcloud command. backend_service: The backend service object. If the backend service object contains a negative caching policy already, it is used as the base to apply changes based on args. Returns: The negative caching policy. N)coder)negative_caching_policyitemsappendr=,BackendServiceCdnPolicyNegativeCachingPolicyrnegativeCachingPolicy)rrZrrrrs rGetNegativeCachingPolicyr:s! !! 11779 c$$ // F FS G "#: ! !!-!!77C / 9 9 O O  rcd}|jr>g}|jD]-}|j|jj|/|S)zReturns bypass cache on request headers. Args: client: The client used by gcloud. args: The arguments passed to the gcloud command. Returns: The bypass cache on request headers. N) headerName)bypass_cache_on_request_headersrr=1BackendServiceCdnPolicyBypassCacheOnRequestHeader)rrZrheaders rGetBypassCacheOnRequestHeadersrVsZ%)! ))&(#66%,, // K K L !"7 )(rcN|j tj|j}n|jj }|j r4|jjj |j |_|jr4|jjj|j|_ |jr|j|_ |jr|j|_||jj k7r||_yy)aZApplies the connection tracking policy arguments to the specified backend service. If there are no arguments related to connection tracking policy, the backend service remains unmodified. Args: client: The client used by gcloud. args: The arguments passed to the gcloud command. backend_service: The backend service object. N)connectionTrackingPolicyrCopyProtoMessager=&BackendServiceConnectionTrackingPolicy,connection_persistence_on_unhealthy_backends7ConnectionPersistenceOnUnhealthyBackendsValueValuesEnum(connectionPersistenceOnUnhealthyBackends tracking_modeTrackingModeValueValuesEnum trackingModeidle_timeout_secidleTimeoutSecenable_strong_affinityenableStrongAffinity)rrZrconnection_tracking_policys r!ApplyConnectionTrackingPolicyArgsrks--9!)!:!:00"2 >>@ 66>> @ @  = = ?G  >> $ $T%7%7 8+ 040E0E-    ##3  oo<<>@/IO,@rc|j tj|j}n|jj }|r t |}n t |}|rt||||_|r"|jdr|j|_ |j|j|_ |jr4|jjj|j|_|j"|j"|_|j&|j&|_|j*|j*|_|r|jdk(xr|j"du}|j.s|r|j1dd|_|jdk(xr|j&du} |j2s| r|j1dd|_|jdk(xs|jdk(xr|j*du} |j4s| r|j1dd|_|j6|j6|_t;|||} | | |_|j>r(|j8stAjBdd |_|r<|jDs|j6$|j6s|j1d g|_|jF|jF|_$tK||} | | |_&|rH|jNr|j1d d|_$|jPr|j1d g|_&||jj k7r||_yy) aApplies the CdnPolicy arguments to the specified backend service. If there are no arguments related to CdnPolicy, the backend service remains unmodified. Args: client: The client used by gcloud. args: The arguments passed to the gcloud command. backend_service: The backend service object. is_update: True if this is called on behalf of an update command instead of a create command, False otherwise. apply_signed_url_cache_max_age: If True, also adds the signedUrlCacheMaxAgeSec parameter to the CdnPolicy if present in the input arguments. cleared_fields: Reference to list with fields that should be cleared. Valid only for update command. Nsigned_url_cache_max_ageUSE_ORIGIN_HEADERSzcdnPolicy.clientTtlzcdnPolicy.defaultTtlFORCE_CACHE_ALLzcdnPolicy.maxTtlzSetting a negative cache policy also enabled negative caching. If this was not intended, disable negative caching with `--no-negative-caching`.TzcdnPolicy.negativeCachingPolicyzcdnPolicy.serveWhileStalez%cdnPolicy.bypassCacheOnRequestHeaders))rrrr=BackendServiceCdnPolicyrrrrrrsignedUrlCacheMaxAgeSecrequest_coalescingrequestCoalescing cache_modeCacheModeValueValuesEnum cacheMode client_ttl clientTtl default_ttl defaultTtlmax_ttlmaxTtl no_client_ttlrno_default_ttl no_max_ttlnegative_cachingnegativeCachingrrrr r!no_negative_caching_policiesserve_while_staleserveWhileStalerbypassCacheOnRequestHeadersno_serve_while_stale"no_bypass_cache_on_request_headers) rrZr is_updateapply_signed_url_cache_max_agecleared_fields cdn_policyadd_cache_key_policyshould_clean_client_ttlshould_clean_default_ttlshould_clean_max_ttlrrs rApplyCdnPolicyArgsrs5.***?+D+DEJ88:J9$?9$? 1&$ PJ#(8(8 )")-)F)FJ& (#'#:#:J  __"OOCC55dooF __ ??J ! ,,J \\ J#2FF ;#'??d#: 412!j $3G G!=$($4$4$< 623"j!__0DDE $3D D5 $  4 ../j &!%!6!6J4VT5DF('>J$ !!**D*DKK #$"&J ))   *43H3H=>)+j& '!%!7!7J$B64$P!$0-LJ*   78#'j  ..CD/1j,6??::<< *O=rcl|jds"|jds|jdryy)zReturns true if at least one of the failover policy args is defined. Args: args: The arguments passed to the gcloud command. connection_drain_on_failoverdrop_traffic_if_unhealthyfailover_ratioTFrrs rHasFailoverPolicyArgsr s7 56 23 '(  rc*t|r|jr |jn|j}|j|j |_|j |j |_|j|j|_||_yy)aYApplies the FailoverPolicy arguments to the specified backend service. If there are no arguments related to FailoverPolicy, the backend service remains unmodified. Args: messages: The available API proto messages. args: The arguments passed to the gcloud command. backend_service: The backend service proto message object. N) r failoverPolicyBackendServiceFailoverPolicyr disableConnectionDrainOnFailoverrdropTrafficIfUnhealthyr  failoverRatio)r=rZrfailover_policys rApplyFailoverPolicyArgsrs4 *9*H*H&&--/ ((4// /6 %%1/3/M/Mo, &&*&9&9o#%4O"!rc|jdxs7|jdxs$|jdxs|jd}|jjj|jjj|jjj |jjj |jjj|jjj|jjj|jjjg}|r$|j|vrtjdd|r|jr |j}n|j}|j |j |_|j$|j$|_|j(*|jj+|j(|_|j.0|j.|_|j.s||j3d||_yy) aApplies the LogConfig arguments to the specified backend service. If there are no arguments related to LogConfig, the backend service remains unmodified. Args: messages: The available API proto messages. args: The arguments passed to the gcloud command. backend_service: The backend service proto message object. cleared_fields: Reference to list with fields that should be cleared. Valid only for update command. enable_logginglogging_sample_ratelogging_optionallogging_optional_fieldsz --protocolzcan only specify --enable-logging, --logging-sample-rate, --logging-optional or --logging-optional-fields if the protocol is HTTP/HTTPS/HTTP2/H2C/TCP/SSL/UDP/UNSPECIFIED.NzlogConfig.optionalFields)rrProtocolValueValuesEnumHTTPHTTPSHTTP2TCPSSLUDP UNSPECIFIEDH2Cprotocolr r7 logConfigBackendServiceLogConfigrenabler sampleRaterOptionalModeValueValuesEnum optionalModeroptionalFieldsr)r=rZrrlogging_specifiedvalid_protocols log_configs rApplyLogConfigArgsr,/s& '(5  / 05  , -5   3 4 55::55;;55;;55995599559955AA5599 /?33?J  - - I   ",,j335j &--j +"66j (  * * F F##   ##/"&">">j  ) )n.H89 *O'rrrZr project_namelocationr[returnc6|jr|jj}|jjD]N\}}|dk(rt j |||||_*|dk(r||_7tjdd|z||_ yy)aApplies the TlsSettings arguments to the specified backend service. If there are no arguments related to TlsSettings, the backend service remains unmodified. Args: client: The client used by gcloud. args: The arguments passed to the gcloud command. backend_service: The backend service proto message object. project_name: The project name of the backend service. location: The location of the backend service. release_track: The release track of the backend service. authenticationConfig)r-r.bac_namer[sniz--tls-settingszInvalid key: %sN) tls_settingsr=BackendServiceTlsSettingsrr #BuildBackendAuthenticationConfigUrlr1r3r r7 tlsSettings) rrZrr-r.r[r4keyrBs rApplyTlsSettingsArgsr9rs* ??<<>L''--/ U & &  ? ?)!+   ) %< 11 /#5  0 #/O%rcz|jr|j|_|jr|j|_yy)zApplies the Custom Metrics argument to the backend service. Args: args: The arguments passed to the gcloud command. backend_service: The backend service object. N)custom_metrics customMetricscustom_metrics_file)rZrs rApplyCustomMetricsr>s7 $($7$7O! $($<$ >n // V V X $$!'!m!m"G"G  ' '"n **&*&I&In#;I*8 /5; rc\|jdk(rM|jjj|jj di|j S|jjj|jjdi|j S)z"Send Backend Services get request.compute.regionBackendServicesr%) Collectionapitools_clientregionBackendServicesGetr=&ComputeRegionBackendServicesGetRequestAsDictbackendServices ComputeBackendServicesGetRequest)rbackend_service_refs rSendGetRequestras##%)HH  ! ! 7 7 ; ;>>> ,!((* , --    / / 3 36foo66*  & & (* ++rcd|ji}|jdk(rd}|j|d<nd}|j|j||}t j ||}tj|||S)aWaits for the backend service operation to finish. Args: resources: The resource parser. service: apitools.base.py.base_api.BaseApiService, the service representing the target of the operation. operation: The operation to wait for. backend_service_ref: The backend service reference. message: The message to show. Returns: The operation result. projectrWzcompute.regionOperationsregionzcompute.globalOperations)params collection) rcrXrdParserrPollerr WaitFor) resourcesservice operationr`messagererf operation_refoperation_pollers rWaitForOperationrps *22 3&##%)HH+J*11F8+J//nnV "<-]]7,?@ (- AArr)NN)FFN):__doc__ __future__rrrtypingrapitools.base.pyr)googlecloudsdk.api_lib.compute.operationsrgooglecloudsdk.api_lib.utilr googlecloudsdk.callioper r "googlecloudsdk.command_lib.computer googlecloudsdk.corecore_exceptionsr rrSErrorrr#r&rDrFrHr]rqrrrrrrrrrrrrrrrr rr,strr9r>rFrJrUrarpr%rrr}s^H&'%<.(.>=#*  6?#8#86 >B+ P H  ~BOB+>2 / 4 9>,.O*  NQb!8)*&JX"'6;&* o+d  5: @+F'/ '/ '/'/ '/  '/  '/ '/T =B( (V+Br