O|dZddlmZddlmZddlmZddlmZddlZddlmZddl m Z dd l m Z dd l mZdd lmZdd lmZdd lmZdd lmZddlmZddlZej2dZdZdZdZdZ d dZ d!dZ d"dZ!d"dZ"dZ#d"dZ$ d"dZ% d"dZ& d!dZ'd#dZ(dZ)dZ*y)$z3Util functions using GKEHub API for fleet commands.)absolute_import)division)print_function)unicode_literalsN) list_pager)gkehub_api_util)apis)waiter)base) exceptions)log) resourcesz'projects/.+/locations/.+/memberships/.+cXtjd}tjd|S)Ncompute) core_apisResolveVersionGetClientInstance) api_versions :lib/googlecloudsdk/command_lib/container/fleet/api_util.py_ComputeClientr&s%((3+  $ $Y <<c.tjddS)Nstoragev1)rrrr_StorageClientr+s  $ $Y 55rc:djt|||S)a^Get the resource name of a membership. Args: project: the project in which to create the membership location: the GCP region of the membership. membership_id: the ID of the membership. Returns: the full resource name of the membership in the format of `projects/{project}/locations/{location}/memberships/{membership_id}` z{}/memberships/{})format ParentRef)projectlocation membership_ids r MembershipRefr#/s  # #Igx$@- PPrc&dj||S)a)Get the resource name of the parent collection of a membership. Args: project: the project of the parent collection. location: the GCP region of the membership. Returns: the resource name of the parent collection in the format of `projects/{project}/locations/{location}`. zprojects/{}/locations/{})r)r r!s rrr?s $ * *7H ==rc tj|} | j}|j|||}| rj|j | |j _| r+| jd|j j _n-d|j j _nd|j _| r|j| }|j|}|j|}|j jr|j jjr|j jjjr0| |j jjj_nS||j jj_n-||j j_ n||j _ |r||j _|dk(r0|j"j$j&|j _n4|d k(r/|j"j$j*|j _|s|s|r i}|sS|j,rG|j,j.D].}t1j2|j4||j6<0|r+t9t1j:|D] \}}|||< |r|D]}||vs|j=||j"j?}t9t1j:|D]1\}}|j.jA|jC|| 3||j _| jDjG|}tHjJjMd jO|| r:tHjJjMd jO|jP|StRjTjW|jPd }tYjZtYj\| jD| j^|djO|jPS)a0UpdateMembership updates membership resource in the GKE Hub API. Args: name: The full resource name of the membership to update, e.g. projects/foo/locations/global/memberships/name. membership: Membership resource that needs to be updated. update_mask: Field names of membership resource to be updated. release_track: The release_track used in the gcloud command. external_id: the unique id associated with the cluster, or None if it is not available. infra_type: The infrastructure type that the cluster is running on clear_labels: Whether labels should be cleared update_labels: Labels to be updated, remove_labels: Labels to be removed, issuer_url: The discovery URL for the cluster's service account token issuer. oidc_jwks: The JSON Web Key Set string containing public keys for validating service account tokens. Set to None if the issuer_url is publicly-reachable. Still requires issuer_url to be set. api_server_version: api_server_version of the cluster async_flag: Whether to return the update operation instead of polling Returns: The updated Membership resource or the update operation if async. Raises: - apitools.base.py.HttpError: if the request returns an HTTP error - exceptions raised by waiter.WaitFor() ) membershipname updateMaskissuerutf-8N k8sVersionresourceOptionskubernetesResourcezon-premz multi-cloud)keyvaluezrequest issued for: [{}]z Check operation [{}] for status.$gkehub.projects.locations.operations collectionz&Waiting for operation [{}] to complete)0rGetApiClientForTrackMESSAGES_MODULE.GkehubProjectsLocationsMembershipsPatchRequest Authorityr& authorityencodeoidcJwksResourceOptionsKubernetesResourceMembershipEndpointendpointr1r/r- externalId Membership!InfrastructureTypeValueValuesEnumON_PREMinfrastructureType MULTI_CLOUDlabelsadditionalPropertiessix text_typer3r2sorted iteritemspop LabelsValueappendAdditionalPropertyprojects_locations_membershipsPatchr statusPrintrr'rREGISTRYParseRelativeNamer WaitForCloudOperationPollerprojects_locations_operations)r'r& update_mask release_track external_id infra_type clear_labels update_labels remove_labels issuer_url oidc_jwksapi_server_version async_flagclientmessagesrequestresource_optionskubernetes_resourcerA mem_labelsitemkvrHop op_resources rUpdateMembershiprqNsV  / / >&  # #(  C C$; D @'#+#5#5Z#5#HG .7.>.>w.Gg""+/3g""+#'G //;M/N"55(6***.+0H""    $ $ 7 7    & & 9 9 I IVh'   % % 8 8 H H SK['   % % 8 8 H9L##6$,g!$/G!9,4,?,?,a,a,i,iG)]",4,?,?,a,a,m,mG)]mJ J--##88$"}}TZZ8 4889}56$!Q 1 7! ? ..  , , .Fs}}Z011 !!((  # # # 352!'G ,,227;"**-44T:;JJ7>>rwwGH I""44gg@5B+  !!&"G"G"("F"FH;BB277K MMrc ltj|} | j} t||} | j | j | |} |r4| j | j|} | | j_ nI|rG| j|}| j|}| j |} | | j_ |r|| j_ |rM| j|| j_|r*|jd| jj_| j"j%| }t&j(j+|j,d }t/j0t/j2| j"| j4|d S) aTCreates a Membership resource in the GKE Hub API. Args: project: the project in which to create the membership membership_id: the value to use for the membership_id location: the location for the membership gke_cluster_self_link: the selfLink for the cluster if it is a GKE cluster, or None if it is not external_id: the unique id associated with the cluster, or None if it is not available. release_track: the release_track used in the gcloud command, or None if it is not available. issuer_url: the discovery URL for the cluster's service account token issuer. Set to None to skip enabling Workload Identity. oidc_jwks: the JSON Web Key Set containing public keys for validating service account tokens. Set to None if the issuer_url is publicly-routable. Still requires issuer_url to be set. api_server_version: api server version of the cluster for CRD Returns: the created Membership resource. Raises: - apitools.base.py.HttpError: if the request returns an HTTP error - exceptions raised by waiter.WaitFor() )r&parent membershipId) resourceLink) gkeClusterr,r.r0r)r+r4r5z$Waiting for membership to be created)rr7r8r/GkehubProjectsLocationsMembershipsCreateRequestrCr@ GkeClusterr&rAr>r?rBr:r;r<r=rRCreaterrVrWr'r rXrYrZ)r r"r!gke_cluster_self_linkr]r\rbrcrdrfrg parent_refrhrArirjrorps rCreateMembershipr|sF  / / >&  # #((+*  D D$$&   E ' **&&4I&J+LH"*G!11=O1P$77*8,,,0-2h$,g!$/G!#+#5#5Z#5#HG .7.>.>w.Gg""+ ,,33G<"""44gg@5B+  !!&"G"G"("F"FH9 ;;rctj| t|tj|}|j j |jj|S)aGets a Membership resource from the GKE Hub API. Args: name: the full resource name of the membership to get, e.g., projects/foo/locations/global/memberships/name. release_track: the release_track used in the gcloud command, or None if it is not available. Returns: a Membership resource Raises: apitools.base.py.HttpError: if the request returns an HTTP error exceptions.Error: if the membership name is missing the ID or improperly formatted r') _MEMBERSHIP_REmatchInvalidMembershipFormatErrorrr7rRGetr8,GkehubProjectsLocationsMembershipsGetRequest)r'r\rfs r GetMembershipr sf$$' &t ,,  / / >&  . . 2 2 IIJ rc0tj|}|D]|}|sdj|}|jj |j j |}|jD]"}t|j}||k(s|ccS~y)ayRetrieves the project that the cluster UUID has a Membership with. Args: uuid: the UUID of the cluster. projects: sequence of project IDs to consider. release_track: the release_track used in the gcloud command, or None if it is not available. Returns: a project ID. Raises: apitools.base.py.HttpError: if any request returns an HTTP error zprojects/{}/locations/globalrsN) rr7rrRListr8-GkehubProjectsLocationsMembershipsListRequestr_ClusterUUIDForMembershipNamer') uuidprojectsr\rfr rsmembership_responser&membership_uuids rProjectForClusterUUIDr%s  / / >&g-44W=f"AAFF  N N O ,55*7 H d ".6  rchtj|}t|dk7r t||dS)aHExtracts the cluster UUID from the Membership resource name. Args: membership_name: the full resource name of a membership, e.g., projects/foo/locations/global/memberships/name. Returns: the name in the membership resource, a cluster UUID. Raises: exceptions.Error: if the membership was malformed. r)rfindalllenr)membership_namematchess rrrBs5  " "? 3'\Q & 77 rcVtj|}|jj|jj |}t jj|jd}tjtj|j|dy)acDeletes a membership from the GKE Hub. Args: name: the full resource name of the membership to delete, e.g., projects/foo/locations/global/memberships/name. release_track: the release_track used in the gcloud command, or None if it is not available. Raises: apitools.base.py.HttpError: if the request returns an HTTP error r~r4r5z$Waiting for membership to be deletedN)rr7rRDeleter8/GkehubProjectsLocationsMembershipsDeleteRequestrrVrWr'r rXCloudOperationPollerNoResourcesrZ)r'r\rfrorps rDeleteMembershiprWs  / / >& ,,33 LLM"""44gg@5B+.. ,,  . .01<,.rctjj}tj|}|j j |jj|||S)aValidate the exclusivity state of the cluster. Args: cr_manifest: the YAML manifest of the Membership CR fetched from the cluster. parent_ref: the parent collection that the cluster is to be registered to. intended_membership: the ID of the membership to be created. release_track: the release_track used in the gcloud command, or None if it is not available. Returns: the ValidateExclusivityResponse from API. Raises: apitools.base.py.HttpError: if the request returns an HTTP error. )rs crManifestintendedMembership) calliope_base ReleaseTrackALPHArr7rRValidateExclusivityr8&  . . B B CC 0D2 33rctjj}tj|}|j j |jj|||S)a6Generate the CR(D) manifests to apply to the registered cluster. Args: crd_manifest: the YAML manifest of the Membership CRD fetched from the cluster. cr_manifest: the YAML manifest of the Membership CR fetched from the cluster. membership_ref: the full resource name of the membership. release_track: the release_track used in the gcloud command, or None if it is not available. Returns: the GenerateExclusivityManifestResponse from API. Raises: apitools.base.py.HttpError: if the request returns an HTTP error. )r' crdManifestr) rrrrr7rRGenerateExclusivityManifestr8DGkehubProjectsLocationsMembershipsGenerateExclusivityManifestRequest) crd_manifestrmembership_refr\rfs rrrs`, ,,22-  / / >&  . . J J KK< L" ##rcFtj|}|j} | j|} |r|j d| _|r|| _|r|| _|r|j d| _|r|| _ |r|| _ |jj| S)aGenerated the Connect Agent to apply to the registered cluster. Args: membership_ref: the full resource name of the membership. image_pull_secret_content: The image pull secret content to use for private registries or None if it is not available. is_upgrade: Is this is an upgrade operation, or None if it is not available. namespace: The namespace of the Connect Agent, or None if it is not available. proxy: The proxy address or None if it is not available. registry: The registry to pull the Connect Agent image if not using gcr.io/gkeconnect, or None if it is not available. version: The version of the Connect Agent to install/upgrade, or None if it is not available. release_track: the release_track used in the gcloud command, or None if it is not available. Returns: the GenerateConnectManifest from API. Raises: apitools.base.py.HttpError: if the request returns an HTTP error. r~r+ascii) rr7r8@GkehubProjectsLocationsMembershipsGenerateConnectManifestRequestr<imagePullSecretContent isUpgrade namespaceproxyregistryversionrRGenerateConnectManifest) rimage_pull_secret_content is_upgraderrrrr\rfrgrhs rGenerateConnectAgentManifestrs@  / / >&  # #(  U U  V '%>%E%Eg%NG""G!G LL)GM G GO  . . F Fw OOrctjdd}|jjtj j d}tfd}tj|j|dd| }|r0|Dcgc]$}t|jr|j&}}n|Dcgc]}|j}}|tfScc}wcc}w) aXLists full Membership names in the fleet for the current project. Args: filter_cluster_missing: whether to filter out memberships that are missing a cluster. Returns: A list of full membership resource names in the fleet in the form 'projects/*/locations/*/memberships/*'. A list of locations which were unreachable. gkehubv1beta-)r!rcRj|jt||SN)update unreachablegetattr)message attributers r _GetFieldFuncz*ListMembershipsFull.._GetFieldFuncs$w**+ 7I &&rrN)fieldbatch_size_attributeget_field_func)rrr8rhub_base HubCommandLocationResourceNamesetr YieldFromListrR_ClusterMissingrAr'list)filter_cluster_missingrfreqrresultm membershipsrs @rListMembershipsFullrs  & &x :&LL  5 5s 5 C M #+'  # # ++ "  &1oajj&A$**6a1666K* d;' '' +s C&C;C"c\dD]'}t||stt||ddcSy)N)rvmultiCloudCluster onPremClusterclusterMissingF)hasattrr)rts rrr s, ?aq!} WQ]$4e << @rcJtjdj|S)zReturns error for invalid membership resource names. Args: name: The membership resource name. Returns: An exceptions.Error for malformed membership names. zsFailed to get membership: {} does not match format projects/PROJECT_ID/locations/LOCATION/memberships/MEMBERSHIP_ID)r Errorrr~s rrrs&   Jt  r) NNFNNNNNF)NNNNNNNr)F)+__doc__ __future__rrrrreapitools.base.pyr&googlecloudsdk.api_lib.container.fleetrgooglecloudsdk.api_lib.utilr rr googlecloudsdk.callioper r*googlecloudsdk.command_lib.container.fleetrgooglecloudsdk.corer r rrJcompilerrrr#rrqr|rrrrrrrrrrrrrrs:&%' 'B9.9G*#) EF= 6 Q >&"& $"'#'#' $#(, %qMl#+/!%#' $#(,F;R4:*.8'+3D/3#@<@,0+/'+*.)-/31Pn#(L= r