4dZddlmZddlmZddlmZddlmZddlmZ ddlm Z ddl m Z ddl mZdd lmZdd lmZdd lmZdd lmZdd lmZddlmZddlZej2ej4j6Gddej8Zy)z$Delete a root certificate authority.)absolute_import)division)unicode_literals)tz)base) request_utils)waiter)flags) operations) resource_args)log) console_io)timesNc&eZdZdZedZdZy)DeleteaDelete a Root Certificate Authority. Delete a Root Certificate Authority. Deleted Root Certificate Authorities may be recovered with the `{parent_command} undelete` command within a grace period of 30 days. Use the --skip-grace-period flag to delete as soon as possible without the 30-day grace period to undelete. Note that any user-managed KMS keys or Google Cloud Storage buckets will not be affected by this operation. You will need to delete the user- managed resources separately once the CA is deleted. Any Google-managed resources will be cleaned up. The CA specified in this command MUST: 1) be in the DISABLED or STAGED state. 2) have no un-revoked or un-expired certificates. Use the revoke command to revoke any active certificates. Use the `--ignore-active-certificates` flag to remove 2) as a requirement. ## EXAMPLES To delete a root CA: $ {command} prod-root --pool=my-pool --location=us-west1 To delete a CA while skipping the confirmation input: $ {command} prod-root --pool=my-pool --location=us-west1 --quiet To undo the deletion for a root CA: $ {parent_command} undelete prod-root --pool=my-pool --location=us-west1 ctj|dtj|tj|tj |y)Nz to delete)r %AddCertAuthorityPositionalResourceArgr AddIgnoreActiveCertificatesFlagAddSkipGracePeriodFlagAddIgnoreDependentResourcesFlag)parsers %lib/surface/privateca/roots/delete.pyArgsz Delete.ArgsLs<77 L ))&1   ( ))&1c tjd}tjd}|jjj }dj |j}|jr|dz }|jr|dz }tj|ds tjjdy|jj!|j#|j }t%j&|j(j*j,|d |jj/|j1|j|j2|j|jt5j6 } t9j:|d d}t9jF||j(} tIjJ| jLjOtQjRjUd} |jr=tjjdj |jytjjdj |j| y#t<j>$r=} t9j>tAjB| jEd dd} ~ wwxYw)Nv1) api_versionz3You are about to delete Certificate Authority [{}].z This deletion will happen without checking if the CA's CA Pool is being used by another resource, which may cause unintended and effects on any dependent resource(s) since the CA Pool would not be able to issue certificates.z This deletion will happen as soon as possible without a 30-day grace period where undeletion would have been allowed. If you proceed, there will be no way to recover this CA.T)messagedefaultzAborted by user.)name)version)r ignoreActiveCertificatesskipGracePeriodignoreDependentResources requestIdzDeleting Root CAz&`ignore_active_certificates` parameterz#`--ignore-active-certificates` flagz%Y-%m-%dT%H:%MZz.Deleted Root CA [{}]. CA can not be undeleted.z3Deleted Root CA [{}]. CA can be undeleted until {}.)+privateca_baseGetClientInstanceGetMessagesModuleCONCEPTScertificate_authorityParseformat RelativeNameignore_dependent_resourcesskip_grace_periodrPromptContinuer statusPrint1projects_locations_caPools_certificateAuthoritiesGetAPrivatecaProjectsLocationsCaPoolsCertificateAuthoritiesGetRequestr CheckExpectedCATypeCertificateAuthorityTypeValueValuesEnum SELF_SIGNEDrDPrivatecaProjectsLocationsCaPoolsCertificateAuthoritiesDeleteRequestignore_active_certificatesrGenerateRequestIdr Awaitr OperationErrorsix text_typereplaceGetMessageFromResponser ParseDateTime expireTime astimezonertzutcstrftime) selfargsclientmessagesca_refprompt_message current_ca operation ca_responseecaformatted_expire_times rRunz Delete.RunSs  - -$ ?F//DAH ]] 0 0 6 6 8F >vv    !@# && ()n   /0n  $ $^T J jj)* IIMM J J$$& K ()J %%%%99EE HHOO M M$$&%)%D%D 22%)%D%D#557 N 9:IK$$ 'T;k  * *;+3+H+H JB"// >II  H./  jjGNN    !" jj ? F F!!#%: <=!  K  % % --  " "#K#H J KKKs&J44L8K??LN)__name__ __module__ __qualname____doc__ staticmethodrrTrrrr$s"$L22 C=rr)rX __future__rrrdateutilr googlecloudsdk.api_lib.privatecarr&rgooglecloudsdk.api_lib.utilr googlecloudsdk.calliope$googlecloudsdk.command_lib.privatecar r r googlecloudsdk.corer googlecloudsdk.core.consolergooglecloudsdk.core.utilrr? ReleaseTracks ReleaseTrackGA DeleteCommandrrZrrrhst+&'C:.(6;>#2* D%%(()q=T  q=*q=r