.5SrSSKJr SSKJr SSKJr SSKJr SSKJr SSK J r SSK J r SS K Jr SS KJr SS KJr SS KJr SS KJr SSKJr SSKJr SSKJr SSKrSrSr"SS\R:5r"SS\R:5r"SS\5r Sr!Sr"Sr#Sr$Sr%Sr&S r'S!r(S,S"jr)S#r*S$r+S%r,S&r-S,S'jr.S(r/S)r0S*r1S-S+jr2g).z4Command line processing utilities for access levels.)absolute_import)division)unicode_literals)encoding)util)waiter)base)concepts)common)policies) arg_utils)concept_parsers) exceptions) resources)yamlN0accesscontextmanager.accessPolicies.accessLevelsa Invalid format: {} The valid fields for the YAML objects in this file type are [{}]. For an access level condition file, an example of the YAML-formatted list of conditions will look like: - ipSubnetworks: - 162.222.181.197/24 - 2001:db8::/48 - members: - user:user@example.com For access levels file, an example of the YAML-formatted list of access levels will look like: - name: accessPolicies/my_policy/accessLevels/my_level title: My Level description: Level for foo. basic: combiningFunction: AND conditions: - ipSubnetworks: - 192.168.100.14/24 - 2001:db8::/48 - members: - user1:user1@example.com c(^\rSrSrU4SjrSrU=r$)ParseResponseErrorDcJ>[[U] SRU55 g)NzIssue parsing response: {})superr__init__format)selfreason __class__s =lib/googlecloudsdk/command_lib/accesscontextmanager/levels.pyrParseResponseError.__init__Fs"  5<[[U] SRX55 g)NzIssue parsing file [{}]: {})rr*rr)rpathrrs rrParseError.__init__Ms! * 6==dKLrr r!r(s@rr*r*KsMMrr*c(^\rSrSrU4SjrSrU=r$)InvalidFormatErrorRc >UR5Vs/sHoDRPM nn[[U]U[ R USRU555 gs snf)N, ) all_fieldsnamerr0r_INVALID_FORMAT_ERRORrjoin)rr-r message_classf valid_fieldsrs rrInvalidFormatError.__init__Ts\$1$<$<$>?$>qFF$>L?   5==dii - /0@sA#r r!r(s@rr0r0Rs 00rr0c[R"U5$![Ra n[USR U55eSnAf[R a n[USR U55eSnAff=f)NzProblem loading file: {}z Problem parsing data as YAML: {})r load_path FileLoadErrorr*rYAMLParseError)r-errs r _LoadDatarA[sqK >>$   C T5<AA>A99A>c[5nUH9nUR5(dMURUR55 M; U(a7[USR SR U55[ US55egNUnrecognized fields: [{}]r3rsetall_unrecognized_fieldsupdater0rr7type)r- conditionsunrecognized_fields conditions r*_ValidateAllBasicConditionFieldsRecognizedrMdsxi((**  !B!B!DE  #**4995H+IJ Z] rc UR5(aB[USRSRUR555[ U55eg)NrDr3)rGr0rr7rI)r-exprs r"_ValidateAllCustomFieldsRecognizedrPpsR !!##  )00  ( ( *2,-.24j ::$rc[5nUH9nUR5(dMURUR55 M; U(a7[USR SR U55[ US55egrCrE)r-levelsrKlevels r!_ValidateAllLevelFieldsRecognizedrTwswe $$&&  !>!>!@A  #**4995H+IJ VAY rc^U4SjnU$)zFWrapper around ParseReplaceAccessLevelsResponse to accept api version.c<>[R"TS9n[RR UR SS9n[ R"URURU5n[R"XCSRUR555$)aZParse the Long Running Operation response of the ReplaceAccessLevels call. Args: lro: Long Running Operation response of ReplaceAccessLevels. unused_args: not used. Returns: The replacement Access Levels created by the ReplaceAccessLevels call. Raises: ParseResponseError: if the response could not be parsed into the proper object. versionzaccesscontextmanager.operations) collectionz0Waiting for Replace Access Levels operation [{}])r GetClientrREGISTRYParser5r BulkAPIOperationPolleraccessPolicies_accessLevels operationsrWaitForrName)lro unused_argsclient operation_refpoller api_versions r)VersionedParseReplaceAccessLevelsResponseSParseReplaceAccessLevelsResponse..VersionedParseReplaceAccessLevelsResponses^^K 0F&&,, >-@M  * *6+M+M+1+<+>:AA     " ##rr )rgrhs` r ParseReplaceAccessLevelsResponserjs#2 32rc^U4SjnU$)6Wrapper around ParseCustomLevel to accept api version.cn>[R"U5nU(d [US5e[R"TS9nUR nUVs/sHn[ R"XC5PM nn[X5 U$s snf![a&n[U[R"U5U5eSnAff=f)zParse a YAML representation of basic level conditions. Args: path: str, path to file containing basic level conditions Returns: list of Condition objects. Raises: ParseError: if the file could not be read into the proper object File is emptyrWN) rr=r*r GetMessages Conditionr DictToMessage Exceptionr0six text_typerM)r-datamessagesr8crJr@rgs r"VersionedParseBasicLevelConditionsEParseBasicLevelConditions..VersionedParseBasicLevelConditionss >>$ D  t_ -- 4H&&MHFJKdH**1[R"U5nU(d [US5e[R"TS9nUR n[ R"X5n[X5 U$![a&n[U[R"U5U5eSnAff=f)zParse a YAML representation of custom level conditions. Args: path: str, path to file containing custom level expression Returns: string of CEL expression. Raises: ParseError: if the file could not be read into the proper object rnrWN) rr=r*rroExprrrqrrr0rsrtrP)r-rurvr8rOr@rgs rVersionedParseCustomLevel3ParseCustomLevel..VersionedParseCustomLevels >>$ D  t_ -- 4HMMMH  # #D 8d't2 K H tS]]3%7 GGHs A// B9!BBr )rgrs` rParseCustomLevelrs6 #"rc^U4SjnU$)z7Wrapper around ParseAccessLevels to accept api version.cn>[R"U5nU(d [US5e[R"TS9nUR nUVs/sHn[ R"XC5PM nn[X5 U$s snf![a&n[U[R"U5U5eSnAff=f)aParse a YAML representation of a list of Access Levels with basic/custom level conditions. Args: path: str, path to file containing basic/custom access levels Returns: list of Access Level objects. Raises: ParseError: if the file could not be read into the proper object rnrWN) rr=r*rro AccessLevelrrqrrr0rsrtrT)r-rurvr8rwrRr@rgs rVersionedParseAccessLevels5ParseAccessLevels..VersionedParseAccessLevelss >>$ D  t_ -- 4H((MHBFG$Q&&q8$fG&d3 M H H tS]]3%7 GGHrzr )rgrs` rParseAccessLevelsrs6 $#rctAUcU$URS5(dURRS5 U$)zFClear basic field (and default combine function) if spec not provided.basic_level_specbasic) IsSpecified accessLevelreset)refargsreqs r(ClearCombiningFunctionUnlessBasicSpecSetrs8 [ J  , - -OO'" *rc,[R"SSS9$)NrSzThe ID of the access level.)r5 help_text)r ResourceParameterAttributeConfigr rrGetAttributeConfigrs  2 2 ; ==rcf[R"SS[R"5[5S9$)NrrS) resource_nameaccessPoliciesIdaccessLevelsId)r ResourceSpecr rr rrGetResourceSpecrs-   8224')  ++rc[RRS[5SR U5SS9R U5 g)Add a resource argument for an access level. NOTE: Must be used only if it's the only resource arg in the command. Args: parser: the parser for the command. verb: str, the verb to describe the resource, such as 'to update'. rSThe access level {}.TrequiredNr ConceptParser ForResourcerr AddToParserparserverbs rAddResourceArgrsC++ ##D) ,![(rc[RRS[5SR U5SS9R U5 g)rz--levelrTrNrrs rAddResourceFlagArgr/sC++##D) ,![(rc[R"S[R"US9RR SSS.SSS9$) Nz--combine-functionrWandor)ANDORFz:For a basic level, determines how conditions are combined.)custom_mappingsrhelp_str)r ChoiceEnumMapperrro BasicLevel CombiningFunctionValueValuesEnumrgs rGetCombineFunctionEnumMapperr?sG  # # )z*J*JK  rc[R"S5[R"S5/nUHnURU5 M g)z1Add common args for level create/update commands.z access levelN)r GetDescriptionArg GetTitleArgr)rrargs r AddLevelArgsrMs? ~. ( $cOOFrcSn[R"SU[U5S9n[US9RnUR U5 UR U5 g)z.Add args for basic spec (with no custom spec).asPath to a file containing a list of basic access level conditions. An access level condition file is a YAML-formatted list of conditions, which are YAML objects representing a Condition as described in the API reference. For example: ``` - ipSubnetworks: - 162.222.181.197/24 - 2001:db8::/48 - members: - user:user@example.com ```--basic-level-spechelprIrN)r Argumentr{r choice_argr)rrgbasic_level_help_textbasic_level_spec_argbasic_level_combine_args rAddBasicSpecArgsrWs`  $[ 139)z""6*%%f-rcSnSn[R"SU[U5S9n[US9Rn[R "SS9nUR U5 UR U5 [R"SU[U5S9n[R "S S9nUR U5 [R "S S S 9n U R U5 U R U5 U RU5 g )z7Add args for basic and custom specs (grouped together).arPath to a file containing a list of basic access level conditions. An access level condition file is a YAML-formatted list of conditions,which are YAML objects representing a Condition as described in the API reference. For example: ``` - ipSubnetworks: - 162.222.181.197/24 - 2001:db8::/48 - members: - user:user@example.com ```zPath to a file representing an expression for an access level. The expression is in the Common Expression Langague (CEL) format.For example: ``` expression: "origin.region_code in ['US', 'CA']" ```rrrzBasic level specification.)rz--custom-level-speczCustom level specification.zLevel specification.T)rmutexN) r rr{rr ArgumentGroup AddArgumentrr) rrgrcustom_level_help_textrrbasic_level_spec_groupcustom_level_spec_argcustom_level_spec_grouplevel_spec_groups rAddBasicAndCustomSpecArgsrps  $[ 139)z --3OP$$%9:$$%<=-- ! K (*!.. (*%%&;<''-C4P5667v&rcjUc0nURSS5(a [X5 g[X5 g)z/Add arguments for in-file level specifications.N custom_levelsF)getrr)rrg feature_masks rAddLevelSpecArgsrs0Lou--f2V)r)N)NN)3__doc__ __future__rrrapitools.base.pyr+googlecloudsdk.api_lib.accesscontextmanagerrgooglecloudsdk.api_lib.utilrgooglecloudsdk.callioper googlecloudsdk.calliope.conceptsr /googlecloudsdk.command_lib.accesscontextmanagerr r $googlecloudsdk.command_lib.util.apisr (googlecloudsdk.command_lib.util.conceptsrgooglecloudsdk.corerrrrs COLLECTIONr6Errorrr*r0rArMrPrTrjr{rrrrrrrrrrrrr rrrs;&'%<.(5BD:D*)$ ? :F))FM!!M00K : 3>,D#B$B  = + ) ) .21'h*r