dZddlmZddlmZddlmZddlmZddlmZddlm Z ddl m Z dd l m Z d d d Ze je j j"Gd de j$Zy)z.'vmware external-access-rules update' command.)absolute_import)division)unicode_literals)ExternalAccessRulesClient) arg_parsers)base)flags)logzI Update a VMware Engine external access firewall rule. a To update an external access firewall rule named `my-external-access-rule` so that it denies the traffic for that rule, run: $ {command} my-external-access-rule --network-policy=my-network-policy --action=DENY --location=us-west2 --project=my-project Or: $ {command} my-external-access-rule --network-policy=my-network-policy --action=DENY In the second example, the project and the location are taken from gcloud properties core/project and compute/regions respectively. ) DESCRIPTIONEXAMPLESc*eZdZdZeZedZdZy)Updatez&Update a VMware Engine network policy.ctj|dtjj |tjj |d|j jd|jdd|jdtjdd d |jd gd d|jdtjddd|jdtjddd|jdtjddd|jdtjddd|jdd d!gd"y#)$z Register flags for this command.T) positionalyamlz --descriptionzG User-provided description of the external access rule. )helpz --prioritydiz Priority of this external access rule. Valid values are numbers between 100 and 4096, with 100 being the highest priority. Firewall rules are processed from highest to lowest priority. )typerz --ip-protocol)TCPUDPICMPz\ Internet protocol covered by the rule. Valid values are TCP, UDP, and ICMP. )choicesrz--source-ranges) min_lengthSOURCE_IP_RANGESz A list of source IP addresses that the rule applies to. Each entry in the list can be a CIDR notation or a single IP address. When the value is set to `0.0.0.0/0`, all IP addresses are allowed. )rmetavarrz--destination-rangesDESTINATION_IP_RANGESz A list of destination IP addresses that the rule applies to. Each entry in the list be an ExternalAddress resource name or `0.0.0.0/0`. When the value is set to `0.0.0.0/0`, all IP addresses are allowed. z--source-ports SOURCE_PORTSz_ List of allowed source ports. Each entry must be either an integer or a range. z--destination-portsDESTINATION_PORTSzd List of allowed destination ports. Each entry must be either an integer or a range. z--actionALLOWDENYze Whether the firewall rule allows or denies traffic based on a successful rule match. N) r AddExternalAccessRuleToParserr ASYNC_FLAG AddToParser SetDefault display_info AddFormat add_argumentr BoundedIntArgList)parsers Clib/surface/vmware/network_policies/external_access_rules/update.pyArgsz Update.Args4s ''4@OO'OOvt, !!&)      # #C .   &     A ."     A .'     A .     A .#   &!  c `|jjj}t}|j}|j ||j |j|j|j|j|j|j|j }|r#tj|j ddy|j#|j%|dj'|j)d}tj|j)d|S)Nz"VMware Engine external access ruleT)kindis_asyncz3waiting for external access rule [{}] to be updated) operation_refmessage has_result)r0)CONCEPTSexternal_access_ruleParserasync_rpriority ip_protocol source_rangesdestination_ranges source_portsdestination_ports descriptionactionr UpdatedResourcenameWaitForOperationGetOperationRefformat RelativeName)selfargsr6clientr1 operationresources r,Runz Update.Runos====CCE & (F{{H 2DMM"..0B0B"55t7H7H"44d6F6F"kk +I   ..3 &&,,Y7ELL - - /1 'H ))+ 1 Or.N) __name__ __module__ __qualname____doc__ DETAILED_HELP detailed_help staticmethodr-rLr.r,rr/s".-8 8 tr.rN)rP __future__rrr1googlecloudsdk.api_lib.vmware.externalaccessrulesrgooglecloudsdk.callioperr2googlecloudsdk.command_lib.vmware.network_policiesr googlecloudsdk.corer rQ ReleaseTracks ReleaseTrackGA UpdateCommandrrTr.r,r^sp5&'W/(D#    (D%%(()XT  X*Xr.