dZddlmZddlmZddlmZddlmZddlmZddl m Z ddl m Z Gdd ejeje jZy ) z.Manages content bundles for Policy Controller.)absolute_import)division)unicode_literals)base)command)contentc4eZdZdZdZdZedZdZdZ y)SetaSets bundle installation for Policy Controller content. Google-defined policy bundles of constraints can be installed onto Policy Controller installations. The namespace exclusion flag (`--exempted-namespaces`) will specify a set of namespaces that the installed bundle will ignore. Subsequent calls with the same bundle name and this flag will overwrite what namespaces are being ignored. Using `--no-exempted-namespaces` or specifying no namespaces with `--exempted-namespaces` will remove all namespaces from the ignore list. To uninstall a bundle, use the `remove` command. ## EXAMPLES To install a policy bundle: $ {command} cis-k8s-v1.5.1 To install a policy bundle, while ignoring (exempting) certain namespaces from being affected by the bundle: $ {command} cis-k8s-v1.5.1 --exempted-namespaces=kube-system,gatekeeper-system To remove all exempted namespaces from a particular bundles ignore list: $ {command} cis-k8s-v1.5.1 --no-exempted-namespaces policycontrollerctj|d}|j|j|j tj dy)Nbundlesz6The constraint bundle to install in Policy Controller.)help)rFlagsadd_membershipsadd_exempted_namespaces add_argumentARG_LABEL_BUNDLE)clsparser cmd_flagss Clib/surface/container/fleet/policycontroller/content/bundles/set.pyArgszSet.Args<sI fi0I  %%'   Ec tj||j}|j|d}|j Dcic]\}}||j ||}}}|j |Scc}}w)NT)r FlagParsermessages path_specsitemsmodify update_specs)selfargsrspecspaths updated_specss rRunzSet.RunGsm   dmm 4F OOD$ 'EAFOgdAT4;;q&11MO   ] ++PsA7c|jjj}|j||jj_|S)N)r policyControllerHubConfig policyContentinstall_bundle)r!specrpolicy_contents rrz Set.modifyMsG 77EE n- 33A KrN) __name__ __module__ __qualname____doc__ feature_namemf_name classmethodrr'rrrr r s/<$, ', rr N)r1 __future__rrr3googlecloudsdk.command_lib.container.fleet.featuresr=googlecloudsdk.command_lib.container.fleet.membershipfeaturesmf_base;googlecloudsdk.command_lib.container.fleet.policycontrollerrr UpdateCommand PocoCommandr r5rrr=sA5&'DYOO:$  g33W5H5H:r