o @sdZddlZddlZddlZddlZddlZddlmZddlm Z ddlm Z ddlm Z ddl m Z ddl mZddlmZdd lmZdd lmZdd lmZdd lmZd ZdZdZdZdZdZdZdZdZdZdZ dZ!dZ"dZ#dZ$dZ%dZ&e'hdZ(dZ)d Z*d!Z+d"Z,d#Z-d$Z.d%d&iZ/Gd'd(d(ej0Z1d)d*Z2d+d,Z3d-d.Z4d/d0Z5d1d2Z6d3d4Z7d5e8d6e8fd7d8Z9d5e8d6e8fd9d:Z:dd5e8dZ;dd5e8ddEej?fdFdGZ@ HddIdJZAddKdLZB HddMdNZCdOej?fdPe8dQe8dReDdSeDfdTdUZE OddPe8dQe8dReDfdVdWZFddPe8dQe8dReDfdXdYZGddPe8d6e8dReDfdZd[ZHd\d]ZI H H Hdd^eJd_eJd`eJfdadbZKdce8dde8fdedfZLdce8dde8fdgdhZM i   H Hddjee8dke8dle8dme8dne8d^eJdoeJfdpdqZN  dd6e8dke8dme8dne8fdrdsZO i H   H H Hddke8djee8dle8d`eJdme8dne8d^eJdteJdueJfdvdwZP i  ddke8d6e8dxe8dme8dne8f dydzZQd{d|ZRd}d~ZSdddZTddZUddZVGdddZW  ddke8deJdReDdSeDdme8dne8f ddZX  ddke8deJdReDdSeDdme8dne8f ddZYddZZd5e8fddZ[d5e8fddZ\d5e8fddZ]de^e8fddZ_e1j`fddZadddZb HdddZc HdddZdddZeddZfddZgddej?fddZhddej?fddZidddZjdS)zservices helper functions.N)List)encoding) exceptions) list_pager) services_util) apis_internal) http_retry)log) properties) transportz projects/%sz folders/%szorganizations/%szprojects/%s/services/%szfolders/%s/services/%szorganizations/%s/services/%sz services/%sz/groups/dependenciesz/reverseClosurez%s/services/%sz/consumerPolicies/%sz/mcpPolicies/%szmcp_server:urlsz/effectivePolicyz/effectiveMcpPolicyzcategories/googlez%s/consumerOverrides/%s>folders/organizations/ projects/v1v1beta1v1alphav2alphav2betaizanthos.googleapis.comz\Warning: Disabling this service will also automatically disable any running Anthos clusters.c@seZdZdZdZdZdZdS) ContainerTypezReturn the container type.N)__name__ __module__ __qualname____doc__PROJECT_SERVICE_RESOURCEFOLDER_SERVICE_RESOURCEORG_SERVICE_RESOURCErrI/tmp/google-cloud-sdk/lib/googlecloudsdk/api_lib/services/serviceusage.pyrEs rcCs t|S)z?Return the warning message associated with a protected service.)_PROTECTED_SERVICESget) service_namerrr GetProtectedServiceWarningLs r$cCs d|dS)z?Return the error message associated with a MCP enabled service.zrTo enable the MCP endpoint, the service must be enabled first. Do you want to enable the service for the resource ?r) resource_namerrr GetMcpEnabledErrorQsr'c Chttd}|j}|j|d}z|j|WStjtjfy3}zt |t j WYd}~dSd}~ww)aMake API call to get a consumer policy. Args: policy_name: The name of a consumer policy. Currently supported format '{resource_type}/{resource_name}/consumerPolicies/default'. For example, 'projects/100/consumerPolicies/default'. Raises: exceptions.GetConsumerPolicyPermissionDeniedException: when getting a consumer policy fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: message.GoogleApiServiceusageV2betaConsumerPolicy: The consumer policy versionnameN) _GetClientInstance_V2BETA_VERSIONMESSAGES_MODULE&ServiceusageConsumerPoliciesGetRequestconsumerPoliciesGetapitools_exceptionsHttpForbiddenErrorHttpNotFoundErrorr ReraiseErrorGetConsumerPolicyException policy_nameclientmessagesrequesterrr GetConsumerPolicyV2BetaZs   r>c Cftt}|j}|j|d}z|j|WStjtjfy2}zt |t j WYd}~dSd}~ww)aMake API call to get a MCP policy. Args: policy_name: The name of a MCP policy. Currently supported format '{resource_type}/{resource_name}/mcpPolicies/default'. For example, 'projects/100/mcpPolicies/default'. Raises: exceptions.GetMcpPolicyException: when getting a MCP policy fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The MCP policy r+N) r-r.r/!ServiceusageMcpPoliciesGetRequest mcpPoliciesr2r3r4r5rr6GetMcpPolicyExceptionr8rrr GetMcpPolicyx  rCc Cr?)a0Make API call to get the content security policy for a given project, folder or organization. Args: name: The name of a content security policy. Currently supported format '{resource_type}/{resource_name}/contentSecurityPolicies/default'. For example, 'projects/100/contentSecurityPolicies/default'. Raises: exceptions.GetContentSecurityPolicyException: when getting a content security policy fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The content security policy. r+N) r-r.r/-ServiceusageContentSecurityPoliciesGetRequestcontentSecurityPoliciesr2r3r4r5rr6!GetContentSecurityPolicyExceptionr,r:r;r<r=rrr GetContentSecurityPolicyrDrIc Cshtt}|j}|j||d}z|j|WStjtjfy3}zt |t j WYd}~dSd}~ww)a{Make API call to update the content security policy for a given project, folder or organization. Args: name: The name of a content security policy. Currently supported format '{resource_type}/{resource_name}/contentSecurityPolicies/default'. For example, 'projects/100/contentSecurityPolicies/default'. content_security_policy: The content security policy to update. Raises: exceptions.UpdateContentSecurityPolicyException: when updating a content security policy fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The content security policy. )r,contentSecurityPolicyN) r-r.r//ServiceusageContentSecurityPoliciesPatchRequestrFPatchr3r4r5rr6$UpdateContentSecurityPolicyException)r,content_security_policyr:r;r<r=rrr UpdateContentSecurityPolicys rOr,servicec Cptt}|j}|j||j|dd}z|j|WStjtj fy7}zt |t j WYd}~dSd}~ww)aPMake API call to test MCP enabled. Args: name: Parent resource to test a value against the result of merging MCP policies in the resource hierarchy. Format: "projects/{PROJECT_ID}" (e.g., "projects/foo-bar"), "projects/{PROJECT_NUMBER}" (e.g., "projects/12345678"), "folders/{FOLDER_NUMBER}" (e.g., "folders/1234567") , "organizations/{ORGANIZATION_NUMBER}" (e.g., "organizations/123456"). service: Service name to check if the targeted resource can use this service for MCP. Current supported value: services/{SERVICE_NAME} (format: "services/{service}"). Raises: exceptions.TestMcpEnabledException: when testing value for a service and resource. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Message.State: The state of the service.  serviceName)r,testMcpEnabledRequestN) r-r.r/!ServiceusageTestMcpEnabledRequestTestMcpEnabledRequestrTestMcpEnabledr3r4r5rr6TestMcpEnabledExceptionr,rPr:r;r<r=rrr rWs  rWc CrQ)aMake API call to test enabled. Args: name: Parent resource to test a value against the result of merging consumer policies in the resource hierarchy. format-"projects/100", "folders/101" or "organizations/102". service: Service name to check if the targeted resource can use this service. Current supported value: SERVICE (format: "services/{service}"). Raises: exceptions.TestEnabledPermissionDeniedException: when testing value for a service and resource. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Message.State: The state of the service. rR)r,testEnabledRequestN) r-r.r/ServiceusageTestEnabledRequestTestEnabledRequestr TestEnabledr3r4r5rr6TestEnabledExceptionrYrrr r]s  r]BASICviewc Cttd}|j}|dkr|jjj}n|jjj}|j||d}z|j|WSt j t j fyC}zt |t jWYd}~dSd}~ww)a)Make API call to get a effective policy. Args: name: The name of the effective policy.Currently supported format '{resource_type}/{resource_name}/effectivePolicy'. For example, 'projects/100/effectivePolicy'. view: The view of the effective policy to use. The default view is 'BASIC'. Raises: exceptions.GetEffectivePolicyException: when getting a effective policy fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: message.EffectivePolicy: The effective policy r)r_r,r`N)r-r.r/%ServiceusageGetEffectivePolicyRequestViewValueValuesEnumEFFECTIVE_POLICY_VIEW_BASICEFFECTIVE_POLICY_VIEW_FULLrGetEffectivePolicyr3r4r5rr6GetEffectivePolicyExceptionr,r`r:r; view_typer<r=rrr GetEffectivePolicyV2Betas&  rkc Cra)aIMake API call to get a effective MCP policy. Args: name: The name of the effective MCP policy. Currently supported format '{resource_type}/{resource_name}/effectiveMcpPolicy'. For example, 'projects/100/effectivePolicy'. view: The view of the effective MCP policy to use. The default view is 'BASIC'. Raises: exceptions.GetEffectiveMcpPolicyException: when getting a effective policy fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: message.EffectiveMcpPolicy: The effective MCP policy r)r_rbN)r-r.r/(ServiceusageGetEffectiveMcpPolicyRequestrdEFFECTIVE_MCP_POLICY_VIEW_BASICEFFECTIVE_MCP_POLICY_VIEW_FULLrGetEffectiveMcpPolicyr3r4r5rr6GetEffectiveMcpPolicyExceptionrirrr roGs&  roc Cspttd}|j}|j||jjjd}z|j|WStj tj fy7}zt |t j WYd}~dSd}~ww)aMake API call to get service state for a service . Args: service: Service. Current supported value:(format: "{resource}/{resource_Id}/services/{service}"). Raises: exceptions.GetServiceException: when getting service service state for service in the resource. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Message.GetServicesResponse: Service state of the given resource. r)rbN)r-r.r/ServiceusageServicesGetRequestrdSERVICE_STATE_VIEW_FULLservicesr2r3r4r5rr6GetServiceException)rPr:r;r<r=rrr GetServiceV2Betaqs  ruc Csrttd}|j}|j|||jjjd}z|j|WStj tj fy8}zt |t j WYd}~dSd}~ww)aOMake API call to get service state for multiple services . Args: parent: Parent resource to get service state for. format-"projects/100", "folders/101" or "organizations/102". services: Services. Current supported value:(format: "{resource}/{resource_Id}/services/{service}"). Raises: exceptions.BatchGetServiceException: when getting batch service state for services in the resource. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Message.BatchGetServicesResponse: Service state of the given resource. r))parentrsr`N)r-r.r/#ServiceusageServicesBatchGetRequestrdrrrsBatchGetr3r4r5rr6BatchGetServiceException)rvrsr:r;r<r=rrr BatchGetServices  rzc Csttd}|j}|jd||d}ztjt|j||d|ddWSt j t j fy?}zt |t jWYd}~dSd}~ww)atMake API call to list category services . Args: resource: resource to get list for. format-"projects/100", "folders/101" or "organizations/102". category: category to get list for. format-"catgeory/". page_size: The page size to list.default=200 limit: The max number of services to display. Raises: exceptions.ListCategoryServicesException: when listing the services the parent category includes. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Message.ListCategoryServicesResponse: The services the parent category includes. r){}/{}rvpageSizerslimitbatch_size_attribute batch_sizefieldN)r-r.r/1ServiceusageCategoriesCategoryServicesListRequestformatr YieldFromList_Listercategories_categoryServicesr3r4r5rr6ListCategoryServicesException)resourcecategory page_sizerr:r;r<r=rrr ListCategoryServicess*   rFc Cstd}|j}|j||||d}z|j|WStjtjfy5}zt |tj WYd}~dSd}~wtj yU}zt j dt |tjWYd}~dSd}~ww)aMake API call to update a consumer policy. Args: consumerpolicy: The consumer policy to update. name: The resource name of the policy. Currently supported format '{resource_type}/{resource_name}/consumerPolicies/default. For example, 'projects/100/consumerPolicies/default'. force: Disable service with usage within last 30 days or disable recently enabled service. validateonly: If set, validate the request and preview the result but do not actually commit it. The default is false. Raises: exceptions.UpdateConsumerPolicyPermissionDeniedException: when updating a consumer policy fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Updated consumer policy r)*googleApiServiceusageV2alphaConsumerPolicyr,force validateOnlyN?Provide the --force flag if you wish to force disable services.)r-r/(ServiceusageConsumerPoliciesPatchRequestr1rLr3r4r5rr6UpdateConsumerPolicyExceptionHttpBadRequestErrorr statusPrintErrorconsumerpolicyr,r validateonlyr:r;r<r=rrr UpdateConsumerPolicyV2Alpha. rc Csltt}|j}|j||||d}z|j|WStjtjfy5}zt |t j WYd}~dSd}~ww)aMake API call to update a MCP policy. Args: policy: The MCP policy to update. name: The resource name of the MCP policy. Currently supported format '{resource_type}/{resource_name}/mcpPolicies/default. For example, 'projects/100/mcpPolicies/default'. force: Disable service with usage within last 30 days or disable recently enabled service.(not supported during MVP.) validateonly: If set, validate the request and preview the result but do not actually commit it. The default is false.(not supported during MVP.) Raises: exceptions.class UpdateMcpPolicyException: when getting a MCP policy fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The MCP policy ) mcpPolicyr,rrN) r-r.r/#ServiceusageMcpPoliciesPatchRequestrArLr3r4r5rr6UpdateMcpPolicyException)policyr,rrr:r;r<r=rrr UpdateMcpPolicy s rc Cstt}|j}|j||||d}z|j|WStjtjfy5}zt |t j WYd}~dSd}~wtj yU}zt jdt |t jWYd}~dSd}~ww)aMake API call to update a consumer policy. Args: consumerpolicy: The consumer policy to update. name: The resource name of the policy. Currently supported format '{resource_type}/{resource_name}/consumerPolicies/default. For example, 'projects/100/consumerPolicies/default'. force: Disable service with usage within last 30 days or disable recently enabled service. validateonly: If set, validate the request and preview the result but do not actually commit it. The default is false. Raises: exceptions.UpdateConsumerPolicyException: when updating a consumer policy fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Updated consumer policy ))googleApiServiceusageV2betaConsumerPolicyr,rrNr)r-r.r/rr1rLr3r4r5rr6rrr rrrrrrr UpdateConsumerPolicyV2Beta2rr2r service_grouprrc Cstt}|j}|j|d|d}ztjt|j||d|dd}g}|D]} || q$|WSt j t j t j fy\} zdt | vrJgWYd} ~ St| tjWYd} ~ dSd} ~ ww)aMake API call to list group members of a specific service group. Args: resource: The target resource. service_group: Service group which owns a collection of group members, for example, 'services/compute.googleapis.com/groups/dependencies'. page_size: The page size to list. The default page_size is 50. limit: The max number of services to display. Raises: exceptions.ListGroupMembersPermissionDeniedException: when listing group members fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Message.ListGroupMembersResponse : Group members in the given service group. /r}r~ memberStatesrSU_GROUP_NOT_FOUNDN)r-r.r/,ServiceusageServicesGroupsMembersListRequestrrrservices_groups_membersappendr3rr4r5strrr6ListGroupMembersException) rrrrr:r;r<response member_states member_stater=rrr ListGroupMembersas8   rc Cs|td}|j}|jd||d}ztjt|j|d|ddWStj tj fy=}zt |t j WYd}~dSd}~ww)aeMake API call to list descendant services of a specific service group. Args: resource: The target resource in the format: '{resource_type}/{resource_name}'. service_group: Service group, for example, 'services/compute.googleapis.com/groups/dependencies'. page_size: The page size to list. The default page_size is 50. Raises: exceptions.ListDescendantServicesPermissionDeniedException: when listing descendant services fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Descendant services in the given service group. rr|r}r~rsrrrN)r-r/7ServiceusageServicesGroupsDescendantServicesListRequestrrrr"services_groups_descendantServicesr3r4r5rr6ListDescendantServicesException)rrrr:r;r<r=rrr ListDescendantServicess(  rc Cstt}|j}|jd||d}ztjt|j|d|dd}g}|D]}| |j q#|WSt j t j fyZ} zdt| vrHgWYd} ~ St| tjWYd} ~ dSd} ~ ww)aMake API call to list expanded members of a specific service group. Args: resource: The target resource in the format: '{resource_type}/{resource_name}'. service_group: Service group, for example, 'services/compute.googleapis.com/groups/dependencies'. page_size: The page size to list. The default page_size is 50. Raises: exceptions.ListExpandedMembersException: when listing expanded members fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Message. ExpandedMember.serviceName : Service names of the expanded members of the service group. r|r}r~membersrrN)r-r.r/4ServiceusageServicesGroupsExpandedMembersListRequestrrrrservices_groups_expandedMembersrrSr3r4r5rrr6ListExpandedMembersException) rrrr:r;r<r service_namesmemberr=rrr ListExpandedMemberss4  rc Cs~td}|j}|j|d|d}ztjt|j|d|ddWStjtj fy>}zt |t j WYd}~dSd}~ww)aVMake API call to list ancestor groups that depend on the service. Args: resource: The target resource.format : '{resource_type}/{resource_name}'. service: The identifier of the service to get ancestor groups of, for example, 'services/compute.googleapis.com'. page_size: The page size to list.The default page_size is 50. Raises: exceptions.ListAncestorGroupsPermissionDeniedException: when listing ancestor group fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Ancestor groups that depend on the service. rrr+r~groupsrN) r-r/-ServiceusageServicesAncestorGroupsListRequestrrrservices_ancestorGroupsr3r4r5rr6+ListAncestorGroupsPermissionDeniedException)rrPrr:r;r<r=rrr ListAncestorGroupss,  rc Cs~ttd}|j}|j|j||jjjgd|jd}z|j |WSt j t j fy>}zt |t jWYd}~dSd}~ww)aMake API call to analyze a consumer policy for dependencies. Args: proposed_policy: The consumer policy to analyze. type : message.GoogleApiServiceusageV2alphaConsumerPolicy Raises: exceptions.AnalyzeConsumerPolicyException: when analyzing a consumer policy fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: message. r))proposedPolicy analysisTypes)analyzeConsumerPolicyRequestr,N)r-r.r/*ServiceusageConsumerPoliciesAnalyzeRequestAnalyzeConsumerPolicyRequest%AnalysisTypesValueListEntryValuesEnumANALYSIS_TYPE_DEPENDENCYr,r1Analyzer3r4r5rr6AnalyzeConsumerPolicyException)proposed_policyr:r;r<r=rrr AnalyzeConsumerPolicys&   r validate_onlybypass_dependency_checkrc Csttd}|j}z|j|dd}d|vr4|ddur4|dD]}d|vr3|j|j|ddq!|st|}t |j t }t |j} i} d| vrz| dD](} | d d D]} | d | vrm| d g| | d <qY| | d | d qYqQ| rd } | D]}| |D] }| |d|d7} qqt| t||j ||dWStjtjfy}zt|tjWYd}~dSd}~ww)aYMake API call to update a consumer policy. Args: consumerpolicy: The consumer policy to update. validate_only: If True, the action will be validated and result will be preview but not exceuted. bypass_dependency_check: If True, dependencies check will be bypassed. force: If True, the system will bypass usage checks for services that are being removed. Raises: exceptions.UpdateConsumerPolicyException: when updating policy API fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The result of the operation r)r,r+ enableRulesNrsrsanalysisanalysisResultwarningsrPmissingDependencyzPolicy cannot be updated as z is missing service dependency  )rr)r-r.r/)GoogleApiServiceusageV2betaConsumerPolicykeysrr%GoogleApiServiceusageV2betaEnableRulerr WaitOperationr,GetOperationV2Betar MessageToDictrr ConfigErrorrr3r4r5r6r)rrrrr:r;r enable_ruleopanalysis_reponsemissing_dependenciesrwarning error_messagerP dependencyr=rrr UpdateConsumerPolicy@sj           rcontent_security_providerr&c Csttd}|j}zsz.AddContentSecurityProvider..The content security provider z already exists.r+N)r-r.r/rI startswithmcpContentSecuritycontentSecurityProvidersrrcopydeepcopyrContentSecurityProviderrOr3r4r5r6#AddContentSecurityProviderException) rr&r:r;rNmcp_content_security#existing_content_security_providers update_policyr=rrr AddContentSecurityProviders:       rc CszAt|}|dsd|}t|}|j}g}d}|jD]}|j|kr(d}q||q|s9t d|d||_t ||WSt j t j fy_}zt|tjWYd}~dSd}~ww)aMake API call to remove a content security provider. Args: content_security_provider: The content security provider to remove. resource_name: The resource name of the content security policy. Raises: exceptions.RemoveContentSecurityProviderException: when removing content security provider from content security policy fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The result of the operation rFTrz does not exist.N)rIrrrrrr,rrrrOr3r4r5r6&RemoveContentSecurityProviderException) rr&rNrr"updated_content_security_providers is_presentrr=rrr RemoveContentSecurityProviders>        rdefaultrsprojectconsumer_policy_namefolder organizationskip_dependencyc Csttd}|j}t|} |rt|} |rt|} | t|} zt| } t} t} | j r4t| j dj } |D]}t || vrE| t |q6t}|s~|D] }t | t |t}|D]}|dd}||vrl| |qZqMt|D] }|| vr}| |qr| s|rtdd|dd|}d|}|rdt|}|d|7}|d7}t|| j rt| D] }| j dj |qn | j |jt| d t| | |d t| fWStjtjfy}zt|tjWYd }~d Sd }~ww) aHMake API call to enable a specific service. Args: services: The identifier of the service to enable, for example 'serviceusage.googleapis.com'. project: The project for which to enable the service. consumer_policy_name: Name of consumer policy. The default name is "default". folder: The folder for which to enable the service. organization: The organization for which to enable the service. validate_only: If True, the action will be validated and result will be preview but not exceuted. skip_dependency: If True, the dependencies of the service to be enabled will not be enabled. Raises: exceptions.EnableServiceException: when enabling API fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The result of the operation r)rrzThe service(s) ,z7 are already enabled and present in the consumer policyz and their dependencies r)rN)r-r.r/_PROJECT_RESOURCE_FOLDER_RESOURCE_ORGANIZATION_RESOURCE_CONSUMER_POLICY_DEFAULTr>setrrs_SERVICE_RESOURCEaddr_DEPENDENCY_GROUPsplitlistrrjoinrrrr3r4r5r6EnableServiceException)rsrrrrrrr:r;r&r9rservices_to_enabledexisting_servicesrPdependent_serviceslist_expanded_membersdependent_servicedependent_service_nameservice_list_strmessagedependent_list_strr=rrr AddEnableRules            rc Csttd}|j}t|}|rt|}|rt|}|td}zGt|}|jrO|jdj D]} | j t |kr>t d|dq,|jdj |jt |dn|j|j|jt |dgdt||WStjtjfy} zt | t jWYd} ~ dSd} ~ ww) a*Make API call to enable a specific service in mcp policy. Args: service: The identifier of the service to enable, for example 'serviceusage.googleapis.com'. project: The project for which to enable the service. folder: The folder for which to enable the service. organization: The organization for which to enable the service. Raises: exceptions.EnableServiceException: when enabling API fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The result of the operation r)rr The service z is already enabled for MCP.rP) mcpServicesN)r-r.r/rrr_MCP_POLICY_DEFAULTrCmcpEnableRulesrrPrrrr McpService McpEnableRulerr3r4r5r6EnableMcpServiceException) rPrrrr:r;r&r9r mcp_servicer=rrr AddMcpEnableRulesD      r"skip_dependency_checkdisable_dependency_servicesc  snt|} |r t|} |rt|} | t|} zt| fdd|Dfdd|D}s;tdd|dt } | j D]} D]} t | | j vrX| j t | qGqCg}|st| }t|jt}t|j}i}d|vr|dD]0}|d d D]'}D]"} t | |d kr| |vrg|| <|| |d ||d qqqy|s|rt|}td |dt|}t | }|j | j D] } t | }| j D] }||vr|j |q|j r|j |qt|| ||dWStjtjfy}zt|tj WYd}~dSd}~wtj!y6}zt"j#$dt|tj%WYd}~dSd}~ww)aMake API call to disable a specific service. Args: project: The project for which to disable the service. services: The list of identifiers of the services to disable, for example ['serviceusage.googleapis.com', 'apikeys.googleapis.com']. consumer_policy_name: Name of consumer policy. The default name is "default". force: Disable service with usage within last 30 days or disable recently enabled service or disable the service even if there are enabled services which depend on it. This also disables the services which depend on the service to be disabled. folder: The folder for which to disable the service. organization: The organization for which to disable the service. validate_only: If True, the action will be validated and result will be preview but not exceuted.` skip_dependency_check: If True, the enabled dependent services of the service to be disabled will remian enabled. disable_dependency_services: If True, the services which depend on the service to be disabled will also be disabled. Raises: exceptions.EnableServiceException: when disabling API fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The result of the operation cs(h|]tfddjDrqS)c3s|] }t|jvVqdSN)rrs)rrrrr s  z-RemoveEnableRule...)anyr)r)current_policyrr s z#RemoveEnableRule..csg|]}|vr|qSrr)rrP)services_to_removerr rsz$RemoveEnableRule..z The services rz( are not enabled in the consumer policy.rrrrrPz@The services are depended on by the following active service(s) z . Please remove the active dependent services or provide the --disable-dependency-services flag to disable them, or --bypass-dependency-service-check to ignore this check.)rrNr)&rrrrr>rrr rrrrrsremoverrrr,rrrrrjsondumpsrclearrr3r4r5r6rrr rrr)rrsrrrrrr#r$r&r9rrrP to_removerrmissing_dependencyrr json_stringupdated_consumer_poicyruler#r=r)r(r*r RemoveEnableRules'               r4mcp_policy_namec Cs8t|}|r t|}|rt|}|t|}zMt|}d}t|} | j|jrS|jD]%} t| } | j D]} | j t |krHd}| j | q7| j rR| j | q-|r^td|dt| |WStjtjfy} zt| tjWYd} ~ dSd} ~ wtjy} zt| tjWYd} ~ dSd} ~ ww)ajMake API call to disable a service for MCP. Args: project: The project for which to disable the service for MCP. service: The service to disable for MCP, for example 'serviceusage.googleapis.com'. mcp_policy_name: Name of MCP policy. The default name is "default". folder: The folder for which to disable the service. organization: The organization for which to disable the service. Raises: exceptions.EnableMcpServiceException: when disabling API fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The result of the operation TFrz is not enabled for MCP.N)rrrrrCrrrr.rrPrr+rrrrr3r4r5r6r rr)rrPr5rrr&r9ralready_disabledupdated_mcp_policymcp_enable_ruler3r!r=rrr RemoveMcpEnableRuleVsJ           r9c Clt}|j}|jt||fd}z|j|WStjtjfy5}zt |t j WYd}~dSd}~ww)aMake API call to enable a specific service. Args: project: The project for which to enable the service. service: The identifier of the service to enable, for example 'serviceusage.googleapis.com'. Raises: exceptions.EnableServiceException: when enabling API fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The result of the operation r+N) r-r/!ServiceusageServicesEnableRequest_PROJECT_SERVICE_RESOURCErsEnabler3r4r5rr6rrrPr:r;r<r=rrr EnableApiCalls  r?c Csrt}|j}|j|j|dt|d}z|j|WStjtj fy8}zt |t j WYd}~dSd}~ww)asMake API call to batch enable services. Args: project: The project for which to enable the services. services: Iterable of identifiers of services to enable. Raises: exceptions.EnableServiceException: when enabling API fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The result of the operation ) serviceIds)batchEnableServicesRequestrvN) r-r/&ServiceusageServicesBatchEnableRequestBatchEnableServicesRequestrrs BatchEnabler3r4r5rr6r)rrsr:r;r<r=rrr BatchEnableApiCalls  rEc Cst}|j}|jjj}|r|jjj}|jt||f|j||dd}z|j |WSt j t j fyG}zt |t jWYd}~dSd}~wt jyg}ztjdt |t jWYd}~dSd}~ww)aQMake API call to disable a specific service. Args: project: The project for which to enable the service. service: The identifier of the service to disable, for example 'serviceusage.googleapis.com'. force: disable the service even if there are enabled services which depend on it. This also disables the services which depend on the service to be disabled. Raises: exceptions.EnableServiceException: when disabling API fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The result of the operation )disableDependentServicescheckIfServiceHasUsage)r,disableServiceRequestNr)r-r/DisableServiceRequest%CheckIfServiceHasUsageValueValuesEnumCHECKSKIP"ServiceusageServicesDisableRequestr<rsDisabler3r4r5rr6rrr rrr)rrPrr:r;checkr<r=rrr DisableApiCalls0     rPc Cr:)aIGet a service. Args: project: The project for which to get the service. service: The service to get. Raises: exceptions.GetServicePermissionDeniedException: when getting service fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The service configuration. r+N) r-r/rqr<rsr2r3r4r5rr6#GetServicePermissionDeniedExceptionr>rrr GetServices  rRcCst}|j}|j|jjjkSr%)r-r/stateGoogleApiServiceusageV1ServiceStateValueValuesEnumENABLED)rPr:r;rrr IsServiceEnabledsrWc@s(eZdZddZeedddZdS)rcCs ||_dSr%) service_usage)selfrXrrr __init__s z_Lister.__init__NcCs|jj||dS)N) global_params)rXr)rYr<r[rrr r sz _Lister.Listr%)rrrrZrRetryOnHttpStatus_TOO_MANY_REQUESTSrrrrr rsrenabledc Cst|}|r t|}|rt|}i}g}z|rs|t} t| } | jD] } | jD]} |dkr/n||d| d|| <|d8}q'q"tdt |dD]&} t ||| | d} | jD]}d |j ddd}|jj||<q[qKn!t||dD]}|j||j <qyt|||dD] }|jj||jj <qg}td d d g}|D] }|||||d q|WStjtjfy}zt|tjWYd}~dSd}~ww) aMake API call to list services. Args: project: The project for which to list services. enabled: List only enabled services. page_size: The page size to list. limit: The max number of services to display. folder: The folder for which to list services. organization: The organization for which to list services. Raises: exceptions.ListServicesException: when listing services fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The list of services rrrrN)rr ServiceListr,title)r,rb)rrr_EFFECTIVE_POLICYrkrrsrrangelenrzr r,r rP displayName_ListPublicServices_ListSharedServices collections namedtupler3r4r5rr6ListServicesException)rr^rrrrr&rsrvr9effectivepolicyrulesvaluer service_stater#public_serviceshared_serviceresult service_inforPr=rrr ListServicesV2Beta%s^        rtc Cst|}|r t|}|rt|}i}g}z|r|t} t| } | jD]} | jD]} ||d| jd|| j<q'q"t dt |dD]<} t ||| | d}|j D]+}|dkr[n$d |jddd}|jjrz|jjjrz|jjjd||<|d8}qSqCnt|t|D] }|jjd||j<qg}tdd d g}|D] }|||||d q|WStjtjfy}zt|tjWYd}~dSd}~ww) a7Make API call to list services. Args: project: The project for which to list MCP services. enabled: List only enabled MCP services. page_size: The page size to list. limit: The max number of services to display. folder: The folder for which to list MCP services. organization: The organization for which to list MCP services. Raises: exceptions.ListMcpServicesException: when listing MCP services fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The list of MCP services rr_rr`rNrrar, mcp_endpoint)r,ru)rrr_EFFECTIVE_MCP_POLICYrorrrrPrdrerzrsr r,r  mcpServerurlsrg_MCP_LIST_FILTERrirjr3r4r5rr6ListMcpServicesException)rr^rrrrr&service_to_endpointrvr9effectivemcppolicyrmr!rnrror#rprrrsrPr=rrr ListMcpServicesV2Betatsh         r}c Cst}|j}|r d}nd}|j|t|d}ztjt|j||d|ddWStj tj fyC}zt |t j WYd}~dSd}~ww)aMake API call to list services. Args: project: The project for which to list services. enabled: List only enabled services. page_size: The page size to list. limit: The max number of services to display. Raises: exceptions.ListServicesException: when listing services fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The list of services z state:ENABLEDN)filterrvr~rsr)r-r/ServiceusageServicesListRequestrrrrrsr3r4r5rr6rk) rr^rrr:r;service_filterr<r=rrr ListServicess. rc Csdt}|j}|j|d}z|j|WStjtjfy1}zt |tj WYd}~dSd}~ww)a>Make API call to get an operation using serviceusageV1 api. Args: name: The name of operation. Raises: exceptions.OperationErrorException: when the getting operation API fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The result of the operation r+N r-r/ ServiceusageOperationsGetRequest operationsr2r3r4r5rr6OperationErrorExceptionrHrrr GetOperations   rc Csftd}|j}|j|d}z|j|WStjtjfy2}zt |tj WYd}~dSd}~ww)aMake API call to get an operation using serviceusageV2alpha api. Args: name: The name of the operation resource. Format 'operations/'. Raises: exceptions.OperationErrorException: when the getting operation API fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The message.Operation object with response and error. rr+NrrHrrr GetOperationV2Alphas  rc Cr()aMake API call to get an operation using serviceusageV2beta api. Args: name: The name of the operation resource. Format 'operations/'. Raises: exceptions.OperationErrorException: when the getting operation API fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The message.Operation object with response and error. r)r+N) r-r.r/rrr2r3r4r5rr6rrHrrr r"s   renabled_servicesc Csttd}|j}tt|D]<}|jd|d|d}z|j|}Wqtj y.Yqtj tj fyJ}z t |t jWYd}~qd}~wwdS)aMGenerate a service identity for an enabled service. Args: container: The container to generate a service identity for. enabled_services: The services to generate a service identity for. Raises: exceptions.GenerateServiceIdentityPermissionDeniedException: when generating service identity fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: A dict with the email and uniqueId of the generated service identity. If service does not have a default identity, the response will be an empty dictionary. r)rrr}N)r-_V1BETA1_VERSIONr/sortedr 2ServiceusageServicesGenerateServiceIdentityRequestrsGenerateServiceIdentityr3rr4r5rr60GenerateServiceIdentityPermissionDeniedException) containerrr:r;rPr<_r=rrr (GenerateServiceIdentityForEnabledService<s(  rc sttd}|j}|tjkrt||f}n|tjkr t||f}n|tjkr,t ||f}nt d|j |d}z|j |}t|jfdddDWStjtjfyj}zt|tjWYd}~dSd}~ww)afGenerate a service identity. Args: container: The container to generate a service identity for. service: The service to generate a service identity for. container_type: The type of container, default to be project. Raises: exceptions.GenerateServiceIdentityPermissionDeniedException: when generating service identity fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: A dict with the email and uniqueId of the generated service identity. If service does not have a default identity, the response will be an empty dictionary. r)z!Invalid container type specified.r}csi|] }|vr||qSrrrkrrr sz+GenerateServiceIdentity..)emailuniqueIdN)r-rr/rrr<r_FOLDER_SERVICE_RESOURCEr_ORG_SERVICE_RESOURCE ValueErrorrrsrrrrr3r4r5rr6r) rrPcontainer_typer:r;rvr<rr=rrr rhs0       rcCsDt|ttd}|j}|jt||fd}tj|j||d|ddS)aList service quota metrics for a consumer. Args: consumer: The consumer to list metrics for, e.g. "projects/123". service: The service to list metrics for. page_size: The page size to list. limit: The max number of metrics to return. Raises: exceptions.PermissionDeniedException: when listing metrics fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The list of quota metrics r)r}r~metricsr) _ValidateConsumerr-rr/3ServiceusageServicesConsumerQuotaMetricsListRequest_CONSUMER_SERVICE_RESOURCErrservices_consumerQuotaMetrics)consumerrPrrr:r;r<rrr ListQuotaMetricss  rc Cst|ttd}|j}t||} |jt||f|j|j|j |||| dgd|dd} z|j | WSt j t jfyR} zt| tjWYd} ~ dSd} ~ ww)aUpdate a quota override. Args: consumer: The consumer to update a quota override for, e.g. "projects/123". service: The service to update a quota override for. metric: The quota metric name. unit: The unit of quota metric. dimensions: The dimensions of the override in dictionary format. It can be None. value: The override integer value. force: Force override update even if the change results in a substantial decrease in available quota. Raises: exceptions.UpdateQuotaOverridePermissionDeniedException: when updating an override fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The quota override operation. r))metricunit overrideValue dimensions) overrides) inlineSourcer)rvimportConsumerOverridesRequestN)rr-rr/_GetDimensionsFServiceusageServicesConsumerQuotaMetricsImportConsumerOverridesRequestrImportConsumerOverridesRequestOverrideInlineSource QuotaOverriderImportConsumerOverridesr3r4r5rr6,UpdateQuotaOverridePermissionDeniedException) rrPrrrrnrr:r;dimensions_messager<r=rrr UpdateQuotaOverrideCalls:     rc Cst|ttd}|j}t||||}t||f} |j| |d} z|j| WSt j t j fyE} zt | t jWYd} ~ dSd} ~ ww)auDelete a quota override. Args: consumer: The consumer to delete a quota override for, e.g. "projects/123". service: The service to delete a quota aoverride for. metric: The quota metric name. unit: The unit of quota metric. override_id: The override ID. force: Force override deletion even if the change results in a substantial decrease in available quota. Raises: exceptions.DeleteQuotaOverridePermissionDeniedException: when deleting an override fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: The quota override operation. r))r,rN)rr-rr/_GetMetricResourceName_LIMIT_OVERRIDE_RESOURCELServiceusageServicesConsumerQuotaMetricsLimitsConsumerOverridesDeleteRequest6services_consumerQuotaMetrics_limits_consumerOverridesDeleter3r4r5rr6,DeleteQuotaOverridePermissionDeniedException) rrPrr override_idrr:r;rvr,r<r=rrr DeleteQuotaOverrideCalls*   rcs6durdS|jjfddtDdS)Ncsg|] }j||dqS))keyrn)AdditionalPropertyrrdtrr rsz"_GetDimensions..)additionalProperties)rDimensionsValuerr)r;rrrr rs  rcCsTt||}|D]}|j|kr |jD]}|j|kr|jSqqtd||f)aGet the metric resource name from metric name and unit. Args: consumer: The consumer to manage an override for, e.g. "projects/123". service: The service to manage an override for. metric: The quota metric name. unit: The unit of quota metric. Raises: exceptions.Error: when the limit with given metric and unit is not found. Returns: The quota override operation. z-limit not found with name "%s" and unit "%s".)rrconsumerQuotaLimitsrr,rr)rrPrrrmqrrr r$s    rcCs(tD] }||r dSqtd|)Nzinvalid consumer format "%s".)_VALID_CONSUMER_PREFIXrrr)rprefixrrr r=s  rir_c Csxttd}|j}|j|d}ztjt|j||d|ddWStj tj fy;}zt |t j WYd}~dSd}~ww)aMake API call to list public services. Args: page_size: The page size to list. default=1000 list_filter: The filter to list public services. limit: The max number of services to display. Raises: exceptions.ListPublicServicesException: when listing public services fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Message.ListPublicServicesResponse: The public services. r))r~r~rsrN)r-r.r/rrrrrsr3r4r5rr6ListPublicServicesException)r list_filterrr:r;r<r=rrr rgDs&   rgc Cszttd}|j}|j||d}ztjt|j||d|ddWStj tj fy<}zt |t j WYd}~dSd}~ww)aMake API call to list shared services. Args: parent: The parent for which to list shared services. page_size: The page size to list. default=1000 list_filter: The filter to list shared services. limit: The max number of services to display. Raises: exceptions.ListSharedServicesException: when listing shared services fails. apitools_exceptions.HttpError: Another miscellaneous error with the service. Returns: Message.ListSharedServicesResponse: The shared services. r))rvr~r~sharedServicesrN)r-r.r/%ServiceusageSharedServicesListRequestrrrrr3r4r5rr6ListSharedServicesException)rvrrrr:r;r<r=rrr rhhs*  rhcCs:ddlm}tjjj}|jtj |d}t j d||dS)z(Get a client instance for service usage.r) transports)response_encodingenable_resource_quota serviceusage) http_client) googlecloudsdk.core.credentialsrr VALUESbilling quota_projectIsExplicitlySetGetApitoolsTransportr ENCODINGrr-)r*rrrrrr r-s r-)r_)FF)r)FFF)rNNFF)NN)rFNNFFF)rNN)F)r)krrirenumr,systypingrapitools.base.pyrrr3rgooglecloudsdk.api_lib.servicesrgooglecloudsdk.api_lib.utilrrgooglecloudsdk.corer r r rrrr<rrrr _REVERSE_CLOSURErrrryrcrv_GOOGLE_CATEGORY_RESOURCEr frozensetr _V1_VERSIONr_V1ALPHA_VERSION_V2ALPHA_VERSIONr.r]r!Enumrr$r'r>rCrIrOrrWr]rkrorurzmaxsizerrrrintrrrrrboolrrrrr"r4r9r?rErPrRrWrrtr}rrrrr rrrrrrrrrrgrhr-rrrr s             !&#)* #+ /& 2 7 *0)( Y : A y D  D * T V' - /% ; , % )