adZddlmZddlmZddlmZddlZddlmZddlm Z ddlm Z dd l m Z dd l mZddlm Zd d d ZGdde j$Zee_y)z$Update endpoint association command.)absolute_import)division)unicode_literalsN)association_api)base) exceptions)association_flags) labels_utila  Update a firewall endpoint association. Check the progress of association update by using `gcloud network-security firewall-endpoint-associations describe`. For more examples, refer to the EXAMPLES section below. a To update labels k1 and k2, run: $ {command} my-assoc --zone=us-central1-a --project=my-proj --update-labels=k1=v1,k2=v2 To remove labels k3 and k4, run: $ {command} my-assoc --zone=us-central1-a --project=my-proj --remove-labels=k3,k4 To clear all labels from the firewall endpoint association, run: $ {command} my-assoc --zone=us-central1-a --project=my-proj --clear-labels ) DESCRIPTIONEXAMPLESc.eZdZdZgdZedZdZy)Updatez,Update a Firewall Plus endpoint association.)z--clear-labelsz--remove-labelsz--update-labelsz--[no-]tls-inspection-policyz--[no-]disabledctj|j|tj|dtj j |tj j|d|j}tj||j}tj||j}tj|j|tj|y)N60mT)r AddAssociationResource ReleaseTrack AddMaxWaitr ASYNC_FLAG AddToParser SetDefaultadd_mutually_exclusive_groupAddDisabledArg add_groupr AddUpdateLabelsFlagsAddTLSInspectionPolicyAddNoTLSInspectionPolicyArg)clsparser outer_grouptls_and_labels_group tls_groups Elib/surface/network_security/firewall_endpoint_associations/update.pyArgsz Update.ArgsBs,,S-=-=-?H  /OO'OOvt,557K$$[1&002$$%9:$AACI,,S-=-=-?K11)<ctj|j}i}|jjj }|j |j}|tjdd|jdrt|dd|d<|jdrO|jjj }|tjd|j|d<nt|ddrd|d<tj j#|}|j%rd|j&|d <|j)|j*j,j.|j&}|j0r|j&|d <|stj2|j4|j6} t9j:|j< } |j?|j| } | r|jd sd |_ | S|jC|jE| djA|jd| S)zUpdates an association with labels and TLS inspection policy. Args: args: argparse.Namespace, the parsed arguments. Returns: A long running operation if async is set, None otherwise. zfirewall-endpoint-associationz-Firewall endpoint association does not exist.disabledFtls_inspection_policyzTLS Inspection Policy resource path is either empty, malformed, or missing necessary flag `--tls-inspection-policy-region`. NOTE: TLS Inspection Policy needs to be in the same region as Firewall Plus endpoint resource.no_tls_inspection_policylabels)seconds)name update_fieldsformatdefaultzrisX+&'b(.I<=    2eT  eP%r$