}^SrSSKJr SSKJr SSKJr SSKJr SSKrSSKJrJ r SSK J r SSK J r SSKJ r SS KJr \R$"S 5r\R$"S 5r\R$"S 5r\ R,rS \S\SS4SjrS\S\SS4SjrS\SS4SjrS\S \ \SS4Sjrg)z4Utility for the CMEK and user-provided AR use cases.)absolute_import)division)print_function)unicode_literalsN)AnyOptional) exceptions) http_clientz`^projects/[^/]+/locations/(?P[^/]+)/keyRings/[a-zA-Z0-9_-]+/cryptoKeys/[a-zA-Z0-9_-]+$zc^projects/(?P[^/]+)/locations/(?P[^/]+)/repositories/[a-z]([a-z0-9-]*[a-z0-9])?$zG^(?P.*)-docker.pkg.dev\/(?P[^\/]+)\/(?P[^\/]+)kms_key function_refreturnc[RU5nU(aVURS5nUS:Xa[R"SS5eUR U:wa[R"SS5egg)zChecks that the KMS key is compatible with the function. Args: kms_key: Fully qualified KMS key name. function_ref: Function resource reference. Raises: InvalidArgumentException: If the specified KMS key is not compatible with the function. locationglobalz --kms-keyz$Global KMS keyrings are not allowed.zBKMS keyrings should be created in the same region as the function.N) _KMS_KEY_REsearchgroupbase_exceptionsInvalidArgumentException locationsId)r r kms_key_matchkms_keyring_locations 1lib/googlecloudsdk/api_lib/functions/cmek_util.pyValidateKMSKeyForFunctionr0s}$$W--(..z:x'  4 4 = #77  4 4  N 8 docker_repositoryc"UcgURnURn[RU5nU(a#UR S5nUR S5nOC[ RU5nU(a#UR S5nUR S5nOSnSnU(aBX%:wa=UR 5UR 5:Xa[R"SSUS35eU(a!X6:wa[R"SSUS35egg)a.Checks that the Docker repository is compatible with the function. Args: docker_repository: Fully qualified Docker repository resource name. function_ref: Function resource reference. Raises: InvalidArgumentException: If the specified Docker repository is not compatible with the function. Nprojectrz--docker-repositoryzLCross-project repositories are not supported: the repository should be in `$z`.zMCross-location repositories are not supported: the repository should be in `$) projectsIdr_DOCKER_REPOSITORY_RErr#_DOCKER_REPOSITORY_DOCKER_FORMAT_REisdigitrr)rr function_projectfunction_location repo_match repo_project repo_locationrepo_match_docker_formats r#ValidateDockerRepositoryForFunctionr)Is# !,,"..$++,=>*##I.L$$Z0MBII  -33I>l.44Z@mml  *  " " $ (<(<(> >  2 2 !"" &  (9  2 2 %&b * :]rcUcU$[RU5nU(aEURS5nURS5nURS5nSRX#U5$U$)zNormalizes the docker repository name to the standard resource format. Args: docker_repository: Fully qualified Docker repository name. Returns: The name in a standard format supported by the API. rrrepoz(projects/{}/locations/{}/repositories/{})r!rrformat)rr(rrnames rNormalizeDockerRepositoryFormatr.~sy @GG&,,Y7G'--j9H # ) )& 1D 5 < <4  rhttp_exceptioncU(aBUR[R:Xa#[R"SR US95egg)Na3An error occurred. Ensure that the KMS key {kms_key} exists and the Cloud Functions service account has encrypter/decrypter permissions (roles/cloudkms.cryptoKeyEncrypterDecrypter) on the key. If you have recently made changes to the IAM config, wait a few minutes for the config to propagate and try again.)r ) status_coder INTERNAL_SERVER_ERRORr FunctionsErrorr,)r/r s rProcessExceptionr4sN  $ $ (I(I I  # # 56rCs;&%' ::A!jj"  0')jjN'#  & & s#$222*-2 2jst4)1# r