zdZddlZddlmZddlmZddlmZ ddl m Z ddl mZ ddlmZdZd d Zd Zd Z dd Zy)z Build utils.N) exceptions)cloudbuild_util)util)iam_util)logz&^\d+@cloudbuild\.gserviceaccount\.com$ctj}d|d|d}|jj|jj |j S)z5Gets the default build service account for a project.z projects/z /locations/z/defaultServiceAccountname)rGetClientInstanceprojects_locationsGetDefaultServiceAccountMESSAGES_MODULE:CloudbuildProjectsLocationsGetDefaultServiceAccountRequestserviceAccountEmail) project_idregionclientr s 0lib/googlecloudsdk/command_lib/run/build_util.py_GetDefaultBuildServiceAccountrsc  , , .& ZL F83I J$  " " ; ; WWX  cVtjd|}|r|jdSy)zEExtracts the service account email from the service account resource.z/serviceAccounts/([^/]+)$N)researchgroup)service_accountmatchs r_ExtractServiceAccountEmailr's' ))0/ B% ;;q> rctj\}}|jj|j t j |S)Nr ) iam_api_utilGetClientAndMessagesprojects_serviceAccountsGet$IamProjectsServiceAccountsGetRequestrEmailToAccountResourceName)service_account_emailrmessagess r_DescribeServiceAccountr(0sP!668&(  ( ( , ,33223HI4 rc| t||}t|} tjt|s1t |}|j rtjd|dyy#tj$rtjd|d|dYytj$r3tjd|dtjd |d wxYw) aUtil to validate the default build service account permission. Prompt a warning to users if cloudbuild.builds.builder is missing. Args: project_id: id of project. region: region to deploy the service. build_service_account: user provided build service account. It will be None, if user doesn't provide it. Raises: ServiceAccountError: if the build service account is disabled/not found/missing required permissions. Nz~Could not build the function due to disabled service account used by Cloud Build. Please make sure that the service account: [z ] is active.zPYour account does not have permission to check details of build service account z). If the deployment fails, please ensure z is active.zThe build service account z does not exist. If you just created this account, or if this is your first time deploying with the default build service account, it may take a few minutes for the service account to become fully available. Please try again later.zBuild service account z does not exist.)rrrr_LEGACY_BUILD_SA_FORMATr(disabledserverless_exceptionsServiceAccountErrorapitools_exceptionsHttpForbiddenErrorrwarningHttpNotFoundError)rrbuild_service_accountr&!build_service_account_descriptions r+ValidateBuildServiceAccountAndPromptWarningr49s$"::vN56KL 88+-B C*A +' + 3 3#77 &'| 5   4 D  / /KK 123/0  =  . . KK $%:$;<  3 3 !6 77GH  sA A''/CAC)global)N)__doc__rapitools.base.pyrr.!googlecloudsdk.api_lib.cloudbuildrgooglecloudsdk.api_lib.iamrr googlecloudsdk.command_lib.iamrgooglecloudsdk.command_lib.runr,googlecloudsdk.corerr*rrr(r4rrr>sA >=;3N#D/33r