@SrSSKJr SSKJr SSKJr SSKrSSKrSSKJr SSKJ r SSKJ r SS KJ r SS KJ r SS KJ r SS KJr SS KJr SSKJr SSKJr SS KJr SSKJr SSKJr SSKJr SSKJ r SSK!r!\RD"S5r#Sr$Sr%SESjr&SFSjr'Sr(Sr)Sr*Sr+SGSjr,Sr-SHSjr.S r/S!r0S"r1SIS#jr2S$r3S%r4S&r5SJS'jr6S(r7S)r8S*r9S+r:S,r;S-r<SKS.jr=S/r>S0r?S1r@S2rAS3rBS4rCS5rDSLS6jrESLS7jrFS8rGS9rHS:rIS;rJSMS<jrKS=rLSLS>jrMS?rNS@rOSArPSMSBjrQSCrRSDrSg)NzHConvenience functions for dealing with instances and instance templates.)absolute_import)division)unicode_literalsN) constants)containers_utils) csek_utils)metadata_utils)utils) zone_utils) exceptions)flags)resource_manager_tags_utils)scope)util)log) resources)timesz2(^[a-zA-Z0-9_.+-]+@[a-zA-Z0-9-]+\.[a-zA-Z0-9-.]+$)zDefault device-name for disk name [{0}] will be [{0}] because it is being mounted to a container with [`--container-mount-disk`]c[R"SU5nU(a7URS5nURS5nURS5nX#U4$g)aGets the CPU and memory specs from the custom machine type name. Args: name: the custom machine type name for the 'instance create' call Returns: A three-tuple with the vm family, number of cpu and amount of memory for the custom machine type. custom_family, the name of the VM family custom_cpu, the number of cpu desired for the custom machine type instance custom_memory_mib, the amount of ram desired in MiB for the custom machine type instance None for both variables otherwise z'([a-zA-Z0-9]+)-custom-([0-9]+)-([0-9]+))NNN)researchgroup)name check_custom custom_family custom_cpucustom_memory_mibs 4lib/googlecloudsdk/api_lib/compute/instance_utils.pyGetCpuRamVmFamilyFromCustomNamer!0sXDdK, &&q)M##A&J$**1- &7 77 ctU(aSRX0U5nOSRX5nU(aUS- nU$)aCreates a custom machine type name from the desired CPU and memory specs. Args: custom_cpu: the number of cpu desired for the custom machine type custom_memory_mib: the amount of ram desired in MiB for the custom machine type instance ext: extended custom machine type should be used if true vm_type: VM instance generation Returns: The custom machine type name for the 'instance create' call z{0}-custom-{1}-{2}zcustom-{0}-{1}z-ext)format)rrextvm_type machine_types r GetNameForCustomr(HsB '..w/@BL$**:ILFL r"clU(aUnO'Ub[RUnO[RnU(dU(dU(amU(d[R"SS5eU(d[R"SS5eU(a[R "SS5e[ UUS-UU5nUnU$)aInterprets the machine type for the instance. Args: machine_type: name of existing machine type, eg. n1-standard custom_cpu: number of CPU cores for custom machine type, custom_memory: amount of RAM memory in bytes for custom machine type, ext: extended custom machine type should be used if true, vm_type: VM instance generation confidential_vm_type: If not None, use default machine type based on confidential-VM encryption type. Returns: A string representing the URL naming a machine-type. Raises: calliope_exceptions.RequiredArgumentException when only one of the two custom machine type flags are used. calliope_exceptions.InvalidArgumentException when both the machine type and custom machine type flags are used to generate a new instance. z --custom-cpuz_Both [--custom-cpu] and [--custom-memory] must be set to create a custom machine type instance.z--custom-memoryz--machine-typez\Cannot set both [--machine-type] and [--custom-cpu]/[--custom-memory] for the same instance.i)r)DEFAULT_MACHINE_TYPE_FOR_CONFIDENTIAL_VMSDEFAULT_MACHINE_TYPEcalliope_exceptionsRequiredArgumentExceptionInvalidArgumentExceptionr()r'r custom_memoryr%r&confidential_vm_typemachine_type_namecustom_type_strings r InterpretMachineTyper3_s6$'!KK"66=C   9 9 : ;;   9 9 = >>  8 8 D EE*%   + r"cURnURnSU;aXURX1US9nURSU4/n/n[ UR XxS95n U(a[ R"USS9 ggg)aChecks that the CPU and memory ratio is a supported custom instance type. Args: compute_client: GCE API client, project: a project, zone: the zone of the instance(s) being created, machine_type_name: The machine type of the instance being created. Returns: Nothing. Function acts as a bound checker, and will raise an exception from within the function if needed. Raises: utils.RaiseToolException if a custom machine type ratio is out of bounds. custom) machineTypeprojectzoneGet)requestserrors_to_collectzCould not fetch machine type:) error_messageN)messagesapitools_clientComputeMachineTypesGetRequest machineTypeslist MakeRequestsr RaiseToolException) compute_clientr7r8r1r=compute mt_get_pb mt_get_reqserrors_s r CheckCustomCpuRamRatiorJs  $ $(  * *' ""66%T7CI((%;Invalid format: expected default or user@domain.com, received )emailscopes)rDEFAULT_SCOPES collections defaultdictrAsplitlenr,r.r$ EMAIL_REGEXmatchSCOPESgetextendServiceAccountsortedsix iteritemsappend) r=rOservice_accountaccounts_to_scopesrpartsaccount scope_uriress r CreateServiceAccountMessagesresx ^  % %FO"..t4e KK E 5zQgi Uq  8 8    8 8   &- )) )#K,=,=o,N,N  8 8  J     $$Y >  "" )CJ&$7J!0<&.&M&MC'N'J#'%;J"+*2*;*;*+<+J' r"c(URUUUS9nU$)z-Create shieldedInstanceConfig message for VM.)enableSecureBoot enableVtpmenableIntegrityMonitoring)ShieldedInstanceConfig)r=enable_secure_boot enable_vtpmenable_integrity_monitoringshielded_instance_configs r #CreateShieldedInstanceConfigMessager{s+ &<<) ;== "!r"c$URUS9nU$)z7Creates shieldedInstanceIntegrityPolicy message for VM.)updateAutoLearnPolicy)ShieldedInstanceIntegrityPolicy)r=update_auto_learn_policy"shielded_instance_integrity_policys r ,CreateShieldedInstanceIntegrityPolicyMessagers&(0'O'O4(P(6$ ,+r"c `U(aU(dgSS/nSS/nURSS5nURSS5nU(a2XB;a-[R"SS US S RU5S 35eU(a3XS;a-[R"SS US S RU5S 35egg)atValidates flags specifying SVSM config. Args: svsm_args: The flags specifying SVSM config. support_snp_svsm: Whether SVSM is supported. Returns: Nothing. Function acts as a validator, and will raise an exception from within the function if needed. Raises: calliope_exceptions.RequiredArgumentException when the flags are not specified or are not valid. N EPHEMERAL NO_CC_TPM RESTRICTED UNRESTRICTEDtpmsnp-irqz --svsm-configz#Unexpected confidential TPM type: [z]. Legal values are [z, z].zUnexpected SEV SNP IRQ mode: [)rXr,r.join) svsm_argssupport_snp_svsm tpm_choicessnp_irq_choicesrsnp_irqs r ValidateSvsmConfigrs * k*+!>2/ eT"# MM)T *'S #  6 6 -cU3 IIk " #2 '   /  6 6 ( 2 IIo & 'r + 0Wr"c[US5(aURS5(aU(dg[URU5 UR(aURR SS5OSnUR(aURR SS5OSnUR R U5nUR RU5nUR UUS9$)z2Create confidentialParavisorConfig message for VM. svsm_configNr!CONFIDENTIAL_TPM_TYPE_UNSPECIFIEDrSEV_SNP_IRQ_MODE_UNSPECIFIED)confidentialTpmType sevSnpIrqMode)hasattr IsSpecifiedrrrXConfidentialParavisorConfig"ConfidentialTpmTypeValueValuesEnumSevSnpIrqModeValueValuesEnum)rlr=rrrconfidential_tpm_typesev_snp_irq_modes r (CreateConfidentialParavisorConfigMessagers $ & &d.>.>}.M.M  T%%'78    5"EF .    9&DE ) **MM  **GG   - -/$ . r"cSnSnSn[US5(aAURS5(a+[UR[5(a URnU(a[US5(aURS5(as[UR [ R5(aJURRUR 5nU(dSURR;aSnSn[XU5nUbUbURUUS9nU$UbURUS9nU$Ub[R"SS5eUbURUS 9nU$) z1Create confidentialInstanceConfig message for VM.Nconfidential_computeconfidential_compute_typeTDX)confidentialInstanceTypeconfidentialParavisorConfig)rz--confidential-compute-typezEConfidential compute type must be specified when using --svsm-config.)enableConfidentialCompute) rr isinstancerboolrr\ string_typesConfidentialInstanceConfig'ConfidentialInstanceTypeValueValuesEnumrr,r.) r=rl!support_confidential_compute_type%support_confidential_compute_type_tdxr confidential_instance_config_msgenable_confidential_computeconfidential_instance_type!confidential_paravisor_config_msgs r !CreateConfidentialInstanceMessagers &*" $# d*++ -..**D11"&";";' d/00 233//1A1ABB++ 0 0  * * , 2  / / 4 4 6%)!#' &N &'#!, + 7'/'J'J!;$E(K($& *)"-'/'J'J!;(K($ *))4  6 6%   #.'/'J'J"=(K($ *)r"c UR5n UbXlUbX)lUbX9lUbXIlUbXYlUb.URR UR55U lUbXyl UbXl U $)z7Create AdvancedMachineFeatures message for an Instance.) AdvancedMachineFeaturesenableNestedVirtualizationthreadsPerCore numaNodeCountvisibleCoreCountenableUefiNetworking(PerformanceMonitoringUnitValueValuesEnumupperperformanceMonitoringUnitenableWatchdogTimer turboMode) r=enable_nested_virtualizationthreads_per_corenuma_node_countvisible_core_countenable_uefi_networkingperformance_monitoring_unitenable_watchdog_timer turbo_modefeaturess r $CreateAdvancedMachineFeaturesMessagers - - /(!-*F'!. ,# 2'$:! ,)1)I)I)r)r#))+*H& # /r"cU[RR:Xa(URUSU[R "U5S.S9$URUSUUS.S9$)aLParses disk resources. Project and zone are ignored if a fully-qualified resource name is given, i.e. - https://compute.googleapis.com/compute/v1/projects/my-project /zones/us-central1-a/disks/disk-1 - projects/my-project/zones/us-central1-a/disks/disk-1 If project and zone cannot be parsed, we will use the given project and zone as fallbacks. Args: resources: resources.Registry, The resource registry name: str, name of the disk. project: str, project of the disk. zone: str, zone of the disk. type_: ScopeEnum, type of the disk. Returns: A disk resource. compute.regionDisksr7region collectionparams compute.disksr7r8)compute_scopes ScopeEnumREGIONParser ZoneNameToRegionName)rrr7r8type_s r ParseDiskResourcerCss* n&&--- ?? (006     ?? "    r"cURURSS9nU(aU$URURSS9nU(aU$[R "SR URUR55e![R[R4a Nf=f![R[R4a Nf=f)aParses the source disk resource of an AttachedDisk. The source of an AttachedDisk is either a partial or fully specified URL referencing either a regional or zonal disk. Args: resources: resources.Registry, The resource registry attached_disk: AttachedDisk Returns: A disk resource. Raises: InvalidResourceException: If the attached disk source cannot be parsed as a regional or zonal disk. r)rrz^Unable to parse disk's source: [{0}] of device name: [{1}], try using `--device-name` instead.)r sourcecloud_resources WrongResourceCollectionExceptionRequiredFieldOmittedExceptionInvalidResourceExceptionr$ deviceName)r attached_diskdisks r !ParseDiskResourceFromAttachedDiskrjs"  ??)>  D k  ??=//O? LD k  00""(&     " "# 6633    6633    s""B"B/$B,+B,/$CCc U(a[[UVs/sHo3RSU5U:HPM sn5(aURS5(d+[R"[ R U55 U$URS5U:wa5[R"SSR XRS555eURS5$s snf)z4Helper method to get device-name for a disk message.rz device-namez--container-mount-diskz{Attempting to mount disk named [{}] with device-name [{}]. If being mounted to container, disk name must match device-name.) filterrrXrwarning&_DEFAULT_DEVICE_NAME_CONTAINER_WARNINGr$r,r.)rrcontainer_mount_diskds r GetDiskDeviceNamersf 2F G2FQUU64 D (2F G 88M " " kk8??EF k - D (  8 8 " J 6$/ 0   -   HsC cU[RR:XaUS:waSnX#S.nO6Sn[U5nX#S.nO$U[RR:XaSnX#S.nUR UWWS9nU$)3Parses disk type reference based on location scope.rzcompute.diskTypesrzcompute.regionDiskTypesrr)rr ZONEGetRegionFromZoner r ) r disk_typer7locationrreplica_zone_cntrr disk_type_refs r ParseDiskTyper(s n&&+++1&j"5f,j"8,h"7f ((///*J 5F//Jv"7- r"cdSRURS5SS5R5$)z1Returns the GCP region that the input zone is in.-N)rrSlower)r8s r r#r#s) $**S/#2& ' - - //r"c2SnX#S.nURXUS9nU$)r!zcompute.storagePoolsrr)r )r storage_poolr7r%rrstorage_pool_refs r ParseStoragePoolr0s0%* 1&__&% r"c&[SU55$)z=Returns True if the user has specified an existing boot disk.c3D# UHoRSS5v M g7f)bootFN)rX).0rs r &UseExistingBootDisk..s 7XXfe $ $s )any)diskss r UseExistingBootDiskr9s 7 7 77r"c`[UVs/sHo RU5PM sn5$s snfN)r7r)rldestsdests r IsAnySpecifiedr>s(  7t$ 7 88 7s+cURS5(dgURX[RRR S9nUR 5$)Nsource_instance_template) default_scope)rResolveAsResourcer compute_scoper GLOBALSelfLink)rlrsource_instance_template_argrefs r GetSourceInstanceTemplaterHsQ  4 5 5 $66 U%8%8%B%B%I%I 7 # r"c USL$r;)r@s r GetSkipDefaultsrKs " --r"c Sn U(a![R"XRU5n Sn U(a URn Sn[ US5(a UR nSn[ US5(a"UR S5(a URnSn[ US5(a"UR S5(a URnSn[ US5(a"UR S5(a URnSn[ US5(a"UR S5(a URnSnU(a[ US5(a URnSnU(a[ US5(a URnSnU(a3[ US 5(a"UR S 5(a URn[X 5nSnU(a[ US 5(a URnSnU(a[ US 5(a UR nSnU(aUR#S 5(a UR$nSnUR#S 5(a[ US 5(a UR&nSnU (a"UR#S5(a UR(nSnU (a[ US5(a UR*nU(a[[-USSSS5(dGU(d@U (d9U(d2U(d+U(d$U(dU(dU(dU(dU(dg[/S0SUR_SUR0_SUR2_S U_SU _SU _SU_SU_SU_SU_SU_SU_SU_S U_S U_S U_SU_S U_SU_SU_6$)z>Generate a Scheduling Message or None based on specified args.Nrrrrrrrrrrrrrrrrryr=rrrrJ)sole_tenancy_util%GetSchedulingNodeAffinityListFromArgsr=rrrrrrrrrrrExtractGracefulShutdownFromArgsrrrjrrrrr>rrrry)rlclient skip_defaultssupport_node_affinitysupport_min_node_cpusupport_node_project"support_host_error_timeout_secondssupport_max_run_duration"support_local_ssd_recovery_timeoutsupport_graceful_shutdownsupport_skip_guest_os_shutdown"support_preemption_notice_durationrrrfreeze_durationrrrrrrrrrrrrrs r GetSchedulingr\s/'MM oo35O,$$L- T?##&&M/ T011d6F6F#7%7%66O  "&"2"23I"J"J44 d()) +,,00 $ d122 455"&"B"B#'G (-*-*!%!@!@'$0B"C"C,,#'G (-*-*.2.>.> &/(/(!%!@!@5 '$0B"C"C,,04-' 9## 880  $223GHH00 344 !::22#(@(@))"88#'G (--"&!@!@  '    !("((    00 "" ,   &     " #2 0 , #> "< ( ( "<  .! "*# $3^% &4' ("<) r"cUR(aSnO URnU(a[USSSS5(d/$[URUR (a/US9$UR US9$)NrO no_scopesr_no_service_account)r=rOr_)r_r_r>rer=r^rO)rlrPrQr_s r GetServiceAccountsr`~sr O**ON Hk#46JLL I %>>R% '''+{{% ''r"c[R"URURURS9n[ R "U5 U$)Nmetadatametadata_from_file)r ConstructMetadataMessager=rcrdrValidateUserMetadata)rlrP user_metadatas r GetValidatedMetadatarhs? 99 oo}}002-'' 6 r"cU(a[USS5(dg[R"URURUR S9$)Nrcrdrb)r>r rer=rcrd)rlrPrQs r GetMetadatarjsB z+? @ @   2 222 44r"c[R"UR5n[R"XR5 U$r;)r BytesToGbboot_disk_sizeWarnIfDiskSizeIsTooSmallboot_disk_type)rlboot_disk_size_gbs r GetBootDiskSizeGbrqs2ood&9&9:  !24G4GH r"c[RRUUR[R "U5S9n[ R"U5nURU5 U$)N) scope_lister) r INSTANCES_ARGrBr compute_flagsGetDefaultScopeListerr ZoneResourceFetcherWarnForZonalCreation)rlrPholder instance_refszone_resource_fetchers r GetInstanceRefsr|s_%%77   66v>8@- %88@,,]; r"cURXR5n[RR UR SS9n[R "XTUR5nU$)NF)allow_rsa_encrypted)rBrr CsekKeyStoreFromFile"source_machine_image_csek_key_fileMaybeLookupKeyMessager>)rl source_imagerDrymachine_image_ref csek_keysdisk_key_or_nones r GetSourceMachineImageKeyrsc"44T;K;KL%%.. --5/J)55N$B$BD r"c:U(+=(d [USSS5$)Nr'rr/)r>rlrQs r CheckSpecifiedMachineTypeArgsrs"  N ~|_ MOr"cN[X5n[XXG5 [X'X4U5nU$)z@Create a machine type URI for given args and instance reference.)CreateMachineTypeNamerJParseMachineType) rlrDresource_parserr7r%rr0r1machine_type_uris r CreateMachineTypeUrirs4,DG(N%o&-@ r"c URnURnURn[USS5n[USS5n[ UUUUUUS9nU$)zACreate a machine type name for given args and instance reference.custom_vm_typeNcustom_extensions)r'rr/r%r&r0)r'rr/getattrr3)rlr0r'rr/r&r%r1s r rrsh"",*$$- D*D 1')40#+! / 1 r"cU[RR:XaSnX#S.nO$U[RR:XaSnX#S.nUR UWWS9R 5nU$)z/Returns the location-specific machine type uri.zcompute.machineTypesrzcompute.regionMachineTypesrrrr r"r r rE)rr1r7r%rrrrs r rrsr n&&+++'J 3F ((///-J 5F$**Jv+??Gxz r"cDSnURS5(a+UR(a[RRnU(aUURS5(a?UR b2[ [RUR R55nU$)z1Returns the CONFIDENTIAL_VM_TYPES of the machine.Nrr)rrrCONFIDENTIAL_VM_TYPESSEVrrr)rlrr0s r GetConfidentialVmTypers ,--$2K2K$::>>'   6 7 7  ( ( 4"9#B#B#'#A#A#G#G#IK r"cVU(aURS5(dgUR$)Ncan_ip_forward)rrrs r GetCanIpForwardrs%4++,<==   r"clUR(a#URRURS9$g)N)items)tagsr=Tags)rlrPs r GetTagsr s( YY ??  dii  00 r"c ^URRRnU(a URRRnUR(aOU"[ [ R"UR55VVs/sHupEURXES9PM snnS9$gs snnf)z%Gets labels for the instance message.keyvalueadditionalPropertiesN) r=Instance LabelsValueInstancePropertieslabelsr[r\r]AdditionalProperty)rlrPinstance_properties labels_valuerrs r GetLabelsrs))55,??55AAL [[  t{{!;<.URU;a"X`Rn[nUR/nO URnURRUU=(d SUS9$g)z=Returns the message of reservation affinity for the instance.reservation_affinityNspecific)zspecific-then-any-reservationzspecific-then-no-reservationnone)consumeReservationTypervalues) rr=ReservationAffinity%ConsumeReservationTypeValueValuesEnumSPECIFIC_RESERVATIONupdateSPECIFIC_THEN_ANY_RESERVATIONSPECIFIC_THEN_NO_RESERVATIONrNO_RESERVATION_RESERVATION_AFFINITY_KEY reservationANY_RESERVATION)rlrP support_specific_then_x_affinity type_msgsreservation_keyreservation_valuesspecific_affinities_mapreservation_types r GetReservationAffinityrJs ,--++ . .O I22($$5544 &    F*"11 " "&= =01J1JK 2o ,,-"22 ?? . ./  #t! / ## r"c [US/5nURR5nUHVnURSS5R 5nU(dM,URRR U5UlMX U$)z6Get NetworkPerformanceConfig message for the instance.network_performance_configsztotal-egress-bandwidth-tier)rr=NetworkPerformanceConfigrXr'TotalEgressBandwidthTierValueValuesEnumtotalEgressBandwidthTier)rlrPnetwork_perf_argsnetwork_perf_configsconfig total_tiers r GetNetworkPerformanceConfigrwsd$A2FAAC!f92>DDFJz6.>//%d&<&<=t5664;K;K(<<  "*D,O,OP ,0+N+N-( r"c URR5nURS5(a[R"UR 5nUbjURRR nU"[[R"U55VVs/sHupVURXVS9PM snnS9Ul URS5(av[US5(a&URS5(aURS:wa[R "SS5eURR#UR$S 9UlU$s snnf) z)Create a Params message for the instance.resource_manager_tagsrrrequest_valid_for_durationr FLEX_STARTz--request_valid_for_durationzS[--request_valid_for_duration] is only supported for FLEX_START provisioning model.rz)r=InstanceParamsrjrGetResourceManagerTagsrResourceManagerTagsValuer[r\r]rresourceManagerTagsrrrr,r.rrrequestValidForDuration)rlrPrret_resource_manager_tagsresource_manager_tags_valuerrs r CreateParamsrsJ ?? ) ) +& 566#::  & &  !, // ( ( A A"$? !'s}}5N'O P  !Q*#*<<=!Q  $f  :;; D. / / 455  " "l 2  8 8 ( !  &,__%=%=//&>&F" -1 sE z'compute.googleapis.com/reservation-name)FF)TFN)NNNNNNNNNNNNNNNN)T)NNNNNNNN)r) FTFTFFFFFr;)F)T__doc__ __future__rrrrQrgooglecloudsdk.api_lib.computerrrr r r googlecloudsdk.callioper r,"googlecloudsdk.command_lib.computer rurrr,googlecloudsdk.command_lib.compute.instances/googlecloudsdk.command_lib.compute.sole_tenancyrrMgooglecloudsdk.corerrrgooglecloudsdk.core.utilrr\compilerUrr!r(r3rJrernrtrrrrrrrrrrr(r#r0r9r>rHrKr\r`rhrjrqr|rrrrrrrrrrrrrrrOrrrJr"r rsO&' 4;5905EEJF>U#<* jjNO =' 04"!&.2 ;|AD* Z( $ $##04#)nb "KO,#LD8*z"& $+\$ N-`!,FG(0 8 9. '+"',##(',Nb '4 O/3 &*      &*Z *(VFr"