dZddlmZddlmZddlmZddlmZddlmZddl m Z ddl m Z dd l Z e jGd d e jZd d de_y )z4Command for creating organization firewall policies.)absolute_import)division)unicode_literals) base_classes)client)base)flagsNc*eZdZdZdZedZdZy)CreatezCreate a Compute Engine organization firewall policy. *{command}* is used to create organization firewall policies. An organization firewall policy is a set of rules that controls access to various resources. Nctj||jjtjy)N)r AddArgFirewallPolicyCreation display_infoAddCacheUpdaterFirewallPoliciesCompleter)clsparsers /lib/surface/compute/firewall_policies/create.pyArgsz Create.Args&s* &&v. ''(G(GHctj|j}tj|j|j t j|jj}|jdrd|jz}n |jdrd|jz}|jjj|j|j}|j!|dS) N)compute_client resourcesversion organizationzorganizations/folderzfolders/) description displayNameF)firewall_policy parent_idonly_generate_request)rComputeApiHolder ReleaseTrackrOrgFirewallPolicyrsix text_typelower IsSpecifiedrrmessagesFirewallPolicyr short_namer )selfargsholderorg_firewall_policyrrs rRunz Create.Run+s  * *4+<+<+> ?F 22}}"" d//1288:<  '"T%6%66i  ( #t{{*imm,,;;$$$//<CO  % %'# & %%r)__name__ __module__ __qualname____doc__FIREWALL_POLICY_ARG classmethodrr/rrr r s( II%rr z To create an organization firewall policy under folder with ID ``123456789", run: $ {command} --short-name=my-policy --folder=123456789 a To create rules to a firewall policy, the user must have the following permission: *`compute.firewallPolicies.create`. To find predefined roles that contain those permissions, see the [Compute Engine IAM roles](https://cloud.google.com/compute/docs/access/iam). )EXAMPLESzIAM PERMISSIONS)r3 __future__rrrgooglecloudsdk.api_lib.computer0googlecloudsdk.api_lib.compute.firewall_policiesrgooglecloudsdk.callioper4googlecloudsdk.command_lib.compute.firewall_policiesr r$DefaultUniverseOnly CreateCommandr detailed_helpr6rrr@s^;&'7C(F %T  %%F  r