#bdZddlmZddlmZddlmZddlmZddlmZddlm Z ddlm Z dd l m Zdd lmZe j"e j$e j&j(e j&j*e j&j,Gd d e j.Zy )z"'logging settings update' command.)absolute_import)division)unicode_literals)util) arg_parsers)base) exceptions) resource_args) completersc&eZdZdZedZdZy)UpdateaUpdate the settings for the Cloud Logging Logs Router. Use this command to update the *--kms-key-name, --storage-location, --disable-default-sink* and --analytics-mode associated with the Cloud Logging Logs Router. The Cloud KMS key must already exist and Cloud Logging must have permission to access it. The storage location must be allowed by Org Policy. Customer-managed encryption keys (CMEK) for the Logs Router can currently only be configured at the organization-level and will apply to all projects in the organization. ## EXAMPLES To enable CMEK for the Logs Router for an organization, run: $ {command} --organization=[ORGANIZATION_ID] --kms-key-name='projects/my-project/locations/my-location/keyRings/my-keyring/cryptoKeys/key' To disable CMEK for the Logs Router for an organization, run: $ {command} --organization=[ORGANIZATION_ID] --clear-kms-key To update storage location for the Logs Router for an organization, run: $ {command} --organization=[ORGANIZATION_ID] --storage-location=[LOCATION_ID] To update storage location for the Logs Router for a folder, run: $ {command} --folder=[FOLDER_ID] --storage-location=[LOCATION_ID] To disable default sink for the Logs Router for an organization, run: $ {command} --organization=[ORGANIZATION_ID] --disable-default-sink=true To enable default sink for the Logs Router for an organization, run: $ {command} --organization=[ORGANIZATION_ID] --disable-default-sink=false To enable analytics for the log buckets under an organization, run: $ {command} --organization=[ORGANIZATION_ID] --disable-default-sink=false --analytics-mode=required c |jd}|jdddtjd|jddd d |jd dd |jddd|jdddgdt j dd|jd}t j|ddd|jdddy) z Register flags for this command.T)requiredz--organizationFORGANIZATION_IDz0Organization to update Logs Router settings for.)rmetavar completerhelpz--folder FOLDER_IDz*Folder to update Logs Router settings for.)rrr--storage-locationzUpdate the storage location for ```_Default``` bucket and ```_Required``` bucket. Note: It only applies to the newly created projects and will not affect the projects created before.)rr--disable-default-sink store_truezEnable or disable ```_Default``` sink for the ```_Default``` bucket. Specify --no-disable-default-sink to enable a disabled ```_Default``` sink. Note: It only applies to the newly created projects and will not affect the projects created before.)actionrz--analytics-mode)roptional unspecifiedzxUpdate the analytics mode for newly-created project buckets. Changing this setting does not modify any existing buckets.zThis is not available. )default universe_help)rhiddenchoicesrz5logs being processed by the Cloud Logging Logs RouterzqThe Cloud KMS CryptoKey Encrypter/Decryper role must be assigned to the Cloud Logging Logs Router service accountz--kms-key-name)resourcepermission_infonamez--clear-kms-keyziDisable CMEK for the Logs Router by clearing out Cloud KMS cryptokey in the organization's CMEK settings.N)add_mutually_exclusive_group add_argumentr OrganizationCompleterrUniverseHelpTextkms_resource_argsAddKmsKeyResourceArg)parser parent_groupgroups &lib/surface/logging/settings/update.pyArgsz Update.ArgsVs4666EL!22 ? A 9 ;  DE  DE 7  ) )N5     / / / ?E** H#  @Bc i}g}gd}|jdrF|jjjj |d<|j d|jdrd|d<|j d|jdr |j |d<|j d|jdr |j|d <|j d|jd r|j d |jd k(r6tjjjj|d <nz|jd k(r6tjjjj|d <n5tjjjj|d <|st!j"|dtj$|}tj&j(j+tjj-|tjjdi|dj/|S)zThis is what gets called when the user runs this command. Args: args: an argparse namespace. All the arguments that were provided to this command invocation. Returns: The updated settings. )z --kms-key-name | --clear-kms-keyrr kms_key_name kmsKeyName clear_kms_keystorage_locationstorageLocationdisable_default_sinkdisableDefaultSinkanalytics_moder analyticsModerz/Please specify at least one property to update.,)r!settings updateMask) IsSpecifiedCONCEPTSr/Parse RelativeNameappendr3r5r7r GetMessagesSettingsAnalyticsModeValueValuesEnumANALYTICS_REQUIREDANALYTICS_OPTIONALANALYTICS_MODE_UNSPECIFIEDcalliope_exceptionsMinimumArgumentExceptionGetParentFromArgs GetClientv2UpdateSettingsLoggingUpdateSettingsRequestjoin)selfargsr: update_maskparameter_names parent_names r+Runz Update.Runs/HKO  ' -- $ $ * * , 9 9 ;|( (!h|( *+$($9$9h !+, ./'+'@'@h#$/0 ())*   *     ' ' D D W W !   * ,     ' ' D D W W !     ' ' D D _ _ !   8 8 L NN((.K >>    - - 770T%%'00<8<xx , 8 . //r-N)__name__ __module__ __qualname____doc__ staticmethodr,rUr<r-r+r r s$ /b;B;Bz:/r-r N)rY __future__rrrgooglecloudsdk.api_lib.loggingrgooglecloudsdk.callioperrr rHgooglecloudsdk.command_lib.kmsr r&+googlecloudsdk.command_lib.resource_managerr UniverseCompatible ReleaseTracks ReleaseTrackALPHABETAGACommandr r<r-r+rgs )''//(EMBT..33T5F5F5I5Ik/T\\k/k/r-