<dZddlmZddlmZddlmZddlmZddlmZddl m Z ddl m Z dd l m Z dd lmZdd lmZdd lmZdd lZe j(Gdde j*Zddie_y )z8Command for updating organization firewall policy rules.)absolute_import)division)unicode_literals) base_classes)firewall_policy_rule_utils)client)base) exceptions)firewall_policies_utils)flags)secure_tags_utilsNc*eZdZdZdZedZdZy)UpdatezvUpdates a Compute Engine firewall policy rule. *{command}* is used to update organization firewall policy rules. Nc|jtjjk(xs+|jtjjk(}t j dd|_|j j|t j|dt j|dt j|t j|t j|t j|t j|t j|t j |t j"|t j$|t j&|t j(||t j*||t j,||t j.||t j0|t j2|t j4|t j6|t j8|t j:|t j<|t j>|dt j@|d|jtjjk(s+|jtjjk(rjt jB|t jD|t jF|t jH|t jJ|yy)NTupdate)required operationF)rupdated)r)& ReleaseTrackr ALPHABETAr FirewallPolicyRuleArgumentFIREWALL_POLICY_ARG AddArgument AddActionAddFirewallPolicyIdAddSrcIpRangesAddDestIpRangesAddLayer4Configs AddDirectionAddEnableLogging AddDisabledAddTargetResourcesAddTargetServiceAccountsAddSrcSecureTagsAddTargetSecureTagsAddSrcThreatIntelligenceAddDestThreatIntelligenceAddSrcRegionCodesAddDestRegionCodesAddSrcAddressGroupsAddDestAddressGroups AddSrcFqdns AddDestFqdnsAddSecurityProfileGroup AddTlsInspectAddDescriptionAddNewPriorityAddOrganizationAddSrcNetworkScopeAddSrcNetworksAddDestNetworkScopeAddSrcNetworkTypeAddDestNetworkType)clsparsersupport_network_scopess 5lib/surface/compute/firewall_policies/rules/update.pyArgsz Update.Args)sm d//555 8    !2!2!7!7 7$>>C''/ OOFU+ f :   &! 6" v 6" f V$ ""6* 6" f% ""6+AB ##F,BC F$:; V%;< f% v& f v !!&)    84 &51 d//555    !2!2!7!7 7 v& 6" ' f% v& 8ciddddddddd d d d d ddddddddddddddddddd }tj|j}|jj ||j d!"}t j||j |j tj|jj#}t j||j |j tj|jj#}g}tj|j}g} g} g} g} g} g}g}g}g}g}g}g}g}g}g}d}d}d!}d}d}d}d}d}g} d}!|D]:}"|j|"s|j!|"r'|j#||"<|j%dr|j&} d$}|j%dr|j(} d$}|j%d%r6d$}tj*|j,|j j.} |j%dr |j0} |j%dr |j2} |j%dr*t5j6|j |j8}|j%dr*t5j6|j |j:}|j%dr|j<}d$}|j%dr|j>}d$}|j%dr|j@}d$}|j%dr|jB}d$}|j%d rE|jDD#cgc].}#tGjH|#|jJ||jL0}}#d$}|j%drE|jND#cgc].}#tGjH|#|jJ||jL0}}#d$}|j%d r|jP}d$}|j%d r|jR}d$}|j%dr8tGjT|jV|jJ||jL&}n1|j%d'r |jXd(k7r|j#d|j%d)r |jZ}|j%d*r |j\}|j%d+r |j^}|j%d,r tj|j`}$n|}$|jtbjjdk(s,|jtbjjfk(r |j%d-r&|j%d.rtijjd/|j%d0r&|j%d1rtijjd2|j%d-r||jls5|j j.jnjpjr}n9|j j.jnjq|jl}d$}|j%dr|jt} d$}|j%d0r||jvs5|j j.jnjxjr}!n9|j j.jnjy|jv}!d$}|j%d.r||jzs5|j j.jnjpjr}n9|j j.jnjq|jz}d$}|j%d1r||j|s5|j j.jnjxjr}!n9|j j.jnjy|j|}!d$}|H||j j.jnjpj~k7r|j#d|r|jtbjjdk(s+|jtbjjfk(r5|j j.jo| | | |||||||||| |!|3}n1|j j.jo| | | |||||||||4 }|j%d5rx|jd6k(r5|j j.jjj}n4|j j.jjj}|j j.j|$|jX||| || |j||||7 }%tGj||jL|jJ8}&|j jj|5|j||&|%9cdddScc}#wcc}#w#1swYyxYw):N src_ip_rangeszmatch.srcIpRangesdest_ip_rangeszmatch.destIpRangessrc_region_codeszmatch.srcRegionCodesdest_region_codeszmatch.destRegionCodes src_fqdnszmatch.srcFqdns dest_fqdnszmatch.destFqdnssrc_address_groupszmatch.srcAddressGroupsdest_address_groupszmatch.destAddressGroupssrc_threat_intelligencezmatch.srcThreatIntelligencesdest_threat_intelligencezmatch.destThreatIntelligences src_networkszmatch.srcNetworkssecurity_profile_groupsecurityProfileGrouptarget_resourcestargetResourcestarget_service_accountstargetServiceAccountssrc_secure_tags srcSecureTagstarget_secure_tagstargetSecureTagsF) with_project)refcompute_client resourcesversionTlayer4_configs)rKoptional_organizationfirewall_policy_clientfirewall_policy_idactionapply_security_profile_group tls_inspectenable_loggingdisabled new_prioritysrc_network_scopesrc_network_typezGAt most one of src_network_scope and src_network_type can be specified.dest_network_scopedest_network_typezIAt most one of dest_network_scope and dest_network_type can be specified.) srcIpRanges destIpRanges layer4ConfigssrcAddressGroupsdestAddressGroupssrcFqdns destFqdnssrcRegionCodesdestRegionCodessrcThreatIntelligencesdestThreatIntelligencessrcNetworkScope srcNetworksdestNetworkScoperR) rhrirjrkrlrmrnrorprqrrrR directionINGRESS) priorityr^matchrvrNrTrP description enableLoggingrbrL tlsInspect) organization)rxfirewall_policyfirewall_policy_rule)JrComputeApiHolderrrResolveAsResourcerXrOrgFirewallPolicysix text_typelowerOrgFirewallPolicyRule rule_utilsConvertPriorityToIntNameIsKnownAndSpecifiedGetValueappend IsSpecifiedr@rAParseLayer4ConfigsrZmessagesrMrOr $TranslateSecureTagsForFirewallPolicyrQrSrHrIrBrCrFr BuildAddressGroupUrlr}r~rGrDrEBuildSecurityProfileGroupUrlrKr^r`rarbrcr rrr ToolExceptionrdFirewallPolicyRuleMatcherSrcNetworkScopeValueValuesEnum UNSPECIFIEDrJrfDestNetworkScopeValueValuesEnumrerg VPC_NETWORKSrvFirewallPolicyRuleDirectionValueValuesEnumrwEGRESSrzGetFirewallPolicyIdapitools_client IncludeFields UpdateRule)'selfargs clearable_arg_name_to_field_nameholderrVorg_firewall_policyfirewall_policy_rule_clientcleared_fieldsrxr@rAlayer4_config_listrMrOrQrSrFrGrDrErBrCrHrIrarbshould_setup_matchtraffic_directmatcherrKr`rdrJrfargxrcrr]s' r<Runz Update.RunVs (,(.( 2( 4 ( % ( ' ( 6( 8( "#A( #$C( +( !"8( -( "#:( ?( 0!($$ * *4+<+<+> ?F  " " 4 4 fU 5 C!22 }}"" d//1288:  #)">"> }}"" d//1288: # N..sxxz:HMN OIJ !NHNG!KL/ ! !# &t}}S/A>sCD0 (((m ()**n ()%88   v}}55 *+.. 12 $ < < )*)NN ----o ,-  @ @mmT44   12 $ < < 23!%!>!> *+.. +,00 ,- ** +a " 6 6""$79M9M +    -. ++ ,a " 6 6""$79M9M ,     $..i  %??j 01 ! > >%)%@%@$($5$5%8!%!5!5   " KK9 923  &$$k ()**n  #h '44T5F5FGll t00666    $"3"3"8"8 8  - .43C3C 4&&      . /D4D4D 5&&     - .%%mm$$>>]]ii %mm44NNmm$$ "  . )(( !  . /&&mm$$>>^^jj  &}}55OOoo%% "  , -$$mm$$>>]]ii %mm44NNmm## "  - .%%mm$$>>^^jj  &}}55OOoo$$ "  ' ]] # # = = \ \ i ij 12    !2!2!8!8 8    D$5$5$:$: :--((BB%',/1 +-#:$<-$/)C $--((BB%',/1 +-#:$<)C    $ 9 $ MM " " 5 5 N N V V  MM " " 5 5 N N U U "==11DD{{ (+5$$$3E 1DD# &&  & & 4 4^ D ( 3 3,34 E D}l E Ds3k23k *kk)__name__ __module__ __qualname____doc__r classmethodr=rr>r<rr s( *'*'Xlr>rEXAMPLESa! To update a rule with priority ``10" in an organization firewall policy with ID ``123456789" to change the action to ``allow" and description to ``new-example-rule", run: $ {command} 10 --firewall-policy=123456789 --action=allow --description=new-example-rule )r __future__rrrgooglecloudsdk.api_lib.computerrr0googlecloudsdk.api_lib.compute.firewall_policiesrgooglecloudsdk.callioper r 4googlecloudsdk.command_lib.compute.firewall_policiesr r r<rsm?&'7SC(.XFZ aT  aaJ  r>