9zSrSSKJr SSKJr SSKJr SSKJr SSKJr SSKJ r SS S S S .r S3S jr S4Sjr S5Sjr S4SjrSrSrS5SjrSrSrSrSrSrS6SjrSrSrSrSrSrS7S jrS!rS"rS#r S$r!S%r"S&r#S'r$S(r%S)r&S*r'S+r(S,r)S-r*S.r+S/r,S0r-S1r.S2r/g)8z'Command line flags for Anthos commands.)absolute_import)division)unicode_literals) arg_parsers)base)fileszpperform a structural comparison of the original/updated Resources, and merge the changes into the local package.zMfail without updating if the local package was modified since it was fetched.zuse 'git format-patch' and 'git am' to apply a patch of the changes between the source version and destination version. Requires the local package to have been committed to a local git repo.zThis will wipe all local changes to the package. Deletes the contents of local package from PACKAGE_DIR and replace them with the remote )zresource-mergez fast-forwardzalpha-git-patchzforce-delete-replacec URSS5R5nU(aUnURSS5 O/SRURSS5R 55nU(dX2S'[ R "U40UD6$)z9Return argument called name as either flag or positional.-_requiredNz--{}dest)replaceupperpopformatlowerrArgument)name positionalkwargsr flags .lib/googlecloudsdk/command_lib/anthos/flags.pyGetFlagOrPositionalr)sq c3  % % '$ D JJz4 ==c3/557 8D 6N t &v &&NcDU=(d SnU(dSn[SUUUUS9$)zGet REPO_URI flag.a Git repository URI containing 1 or more packages as where: * REPO_URI - URI of a git repository containing 1 or more packages as subdirectories. In most cases the .git suffix should be specified to delimit the REPO_URI from the PKG_PATH, but this is not required for widely recognized repo prefixes. If REPO_URI cannot be parsed then an error will be printed an asking for '.git' to be specified as part of the argument. e.g. https://github.com/kubernetes/examples.git * PKG_PATH (optional) - Path to Git subdirectory containing Anthos package files. Uses '/' as the path separator (regardless of OS). e.g. staging/cockroachdb. Defaults to the root directory. * GIT_REF (optional)- A git tag, branch, ref or commit for the remote version of the package to fetch. Defaults to the repository default branch e.g. @main z#REPO_URI[.git]/[PKG_PATH][@GIT_REF]repo_urirrr helpmetavarrrr help_overriderhelp_txts rGetRepoURIFlagr$6s9 (" 3G     rc[SSSSUS9$)N package_pathFz Path to remote subdirectory containing Kubernetes Resource configuration files or directories. Defaults to the root directory. Uses '/' as the path separator (regardless of OS). e.g. staging/cockroachdb rr )rs rGetPackagePathFlagr'Vs"     rc <U=(d Sn[SUU[UUS9$)z!Get Local Package directory flag.a The local directory to fetch the package to. e.g. ./my-cockroachdb-copy * If the directory does NOT exist: create the specified directory and write the package contents to it * If the directory DOES exist: create a NEW directory under the specified one, defaulting the name to the Base of REPO/PKG_PATH * If the directory DOES exist and already contains a directory with the same name of the one that would be created: fail LOCAL_DIR)rrr typerrrExpandLocalDirAndVersionr!s rGetLocalDirFlagr-es4    (   #   rc[SSSSS9$)NpatternFz Pattern to use for writing files. May contain the following formatting verbs %n: metadata.name, %s: metadata.namespace, %k: kind (default "%n_%k.yaml") )rrr rr rrGetFilePatternFlagr1s     rc8[R"SS[SS9$)Nz --strategyFz6Controls how changes to the local package are handled.)r choicesr)rr_MERGE_STRATEGIESr0rrGetStrategyFlagr5s!  C  EErcFU=(d Sn[R"SSSUS9$)Nz]If true and command fails print the underlying command that was executed and its exit status.z --dry-run store_trueFactionr rrr)r"r#s r GetDryRunFlagr;s/ 3 2( ,X GGrc.[R"SSSS9$)Nz --descriptionFzDescription of the Package.r rr:r0rrGetDescriptionFlagr>s ,I KKrc.[R"SSSS9$)Nz--nameFzName of the package.r=r:r0rr GetNameFlagr@s x%6L MMrcX[R"SS[R"5SSS9$)Nz--tagsFz TAG=VALUEzTags for the package.)r r*rr)rrrArgDictr0rr GetTagsFlagrCs+      "  $$rc.[R"SSSS9$)Nz --info-urlFz%Url with more info about the package.r=r:r0rrGetInfoUrlFlagrEs  2 44rcU(aURS5OSn[R"US5n[U5S:Xa USUS-- nU$)zExpand HOME relative (~) directory with optional git_ref. Args: directory: str, directory path in the format PATH[/][@git_ref]. Returns: str, expanded full directory path with git_ref (if provided) @r)splitr ExpandHomeDirlen) directorypathfull_dirs rr,r,sL"+ $  a )(Y!^ d1g H /rc2U=(d Sn[SUUUUS9$)z#Anthos operation cluster name flag.zpCluster to authenticate against. If no cluster is specified, the command will print a list of available options.CLUSTERrr r!s rGetClusterFlagrSs1 8 7(     rc.[R"SSSS9$)Nz--login-configFzMSpecifies the configuration yaml file for login. Can be a file path or a URL.r=r:r0rrGetLoginConfigFlagrUs  5 66rc8[R"SS[SS9$)Nz--login-config-certFzuSpecifies the CA certificate file to be added to trusted pool for making HTTPS connections to a `--login-config` URL.r r*rrrr,r0rrGetLoginConfigCertFlagrYs$  # @  AArc.[R"SSSS9$)N--userFzyIf configuring multiple user accounts in the same kubecconfig file, you can specify a user to differentiate between them.r=r:r0rr GetUserFlagr\s!  D EErc0[R"SSSSS9$)Nz--set-preferred-authFr7zCIf set, forces update of preferred authentication for given cluster)r r9rr:r0rr!GetSetPreferredAuthenticationFlagr^s!   )  **rc.[R"SSSS9$)Nz--serverFzGSpecifies the URL of API server of the cluster to authenticate against.r=r:r0rr GetServerFlagr`s    rc >U=(d Sn[SUU[UUUS9$)z-Anthos operation local output directory flag.z[The output directory of the cluster resources. If empty will export files to ./CLUSTER_NAMEOUTPUT_DIRECTORY)rrr r*rdefaultrr+)rr r"rrcr#s rGetOutputDirFlagrds7 P O(   #  rc.[R"SSSS9$)zAnthos location flag.z --locationFzgSpecifies the Google Cloud location to use. If notspecified will use the current compute/zone property.r=r:r0rrGetLocationFlagrfs  > ??rc.[R"SSSS9$)z+Anthos create-login-config Merge-From flag.z --merge-fromFzNSpecifies the file path of an existing login configuration file to merge with.r=r:r0rrGetMergeFromFlagrhs  * ++rc8[R"SS[SS9$)z'Anthos create-login-config output flag.z--outputFzXDestination to write login configuration file. Defaults to "kubectl-anthos-config.yaml".rWrXr0rrGetConfigOutputFileFlagrj's!  # 2  33rc4[R"SSSS/SS9$)zGAnthos auth token type flag, specifies the type of token to be created.z--typeTawsoidczType of token to be created.)r r3help_str)rChoiceArgumentr0rr GetTypeFlagrp2s%  fo-  //rc.[R"SSSS9$)zhAnthos auth token aws-sts-region flag, specifies the region for AWS STS endpoint for creating AWS token.z--aws-sts-regionFzRegion for AWS STS endpoint.r=r:r0rrGetAwsStsRegionFlagrr;s 5/M OOrc.[R"SSSS9$)zNAnthos auth token cluster flag, specifies cluster name for creating AWS token.z --clusterFz/Name of the cluster for which token is created.r=r:r0rrGetTokenClusterFlagrtAs  < >>rc.[R"SSSS9$)zqAnthos auth token id-token flag, specifies the ID Token received from identity provider after authorization flow.z --id-tokenFzBID Token received from identity provider after authorization flow.r=r:r0rrGetIdTokenFlagrvIs  O QQrc.[R"SSSS9$)zyAnthos auth token access-token flag, specifies the Access Token received from identity provider after authorization flow.z--access-tokenFzFAccess Token received from identity provider after authorization flow.r=r:r0rrGetAccessTokenFlagrxQs    rc.[R"SSSS9$)zAnthos auth token access-token-expiry flag, specifies the Expiration time of access token received from identity provider after authorization flow.z--access-token-expiryFzExpiration time of access token received from identity provider after authorization flow. The expected format is the number of seconds elapsed since January 1, 1970 UTC.r=r:r0rrGetAccessTokenExpiryFlagrz]s  8  rc.[R"SSSS9$)z{Anthos auth token refresh-token flag, specifies the Refresh Token received from identity provider after authorization flow.z--refresh-tokenFzGRefresh Token received from identity provider after authorization flow.r=r:r0rrGetRefreshTokenFlagr|js    rc.[R"SSSS9$)z_Anthos auth token client-id flag, specifies the ClientID is the id for OIDC client application.z --client-idFz/ClientID is the id for OIDC client application.r=r:r0rrGetClientIdFlagr~vs  < >>rc.[R"SSSS9$)zAnthos auth token client-secret flag, specifies the Client Secret is the shared secret between OIDC client application and OIDC provider.z--client-secretFzUClient Secret is the shared secret between OIDC client application and OIDC provider.r=r:r0rrGetClientSecretFlagr~s   rc.[R"SSSS9$)zAnthos auth token idp-certificate-authority-data flag, specifies the PEM-encoded certificate authority certificate for OIDC provider.z --idp-certificate-authority-dataFz@PEM-encoded certificate authority certificate for OIDC provider.r=r:r0rr"GetIdpCertificateAuthorityDataFlagrs ( M OOrc.[R"SSSS9$)zOAnthos auth token idp-issuer-url flag, specifies the URI for the OIDC provider.z--idp-issuer-urlFzeURI for the OIDC provider. This URI should point to the level below .well-known/openid-configuration.r=r:r0rrGetIdpIssuerUrlFlagrs  /  rc.[R"SSSS9$)zAnthos auth token kubeconfig-path flag, specifies the Path to the kubeconfig path that would be updated with ID and access token on expiry.z--kubeconfig-pathFzUPath to the kubeconfig path that would be updated with ID and access token on expiry.r=r:r0rrGetKubeconfigPathFlagrs    rc.[R"SSSS9$)zCAnthos auth token user flag, specifies the User used in kubeconfig.r[FzUser used in kubeconfig.r=r:r0rrGetTokenUserFlagrs %? rc0[R"SSSSS9$)zuUsed to start authentication on a device without a browser in order to perform login on a second device with browser.z --no-browserr7Fz^Option to indicate login completion on a second device with browser.Used with `server` option.r8r:r0rrGetNoBrowserFlagrs!   '  rc.[R"SSSS9$)z|Used to complete authentication that was started on a remote device without a browser, on the current device with a browser.z--remote-bootstrapFzsOption to complete login that was started using `no-browser` optionon a remote device that does not have a browser.r=r:r0rrGetRemoteBootstrapFlagrs  =  r)F)TTNN)N)FFNN)FFNz OUTPUT-DIRN)0__doc__ __future__rrrgooglecloudsdk.callioperrgooglecloudsdk.core.utilrr4rr$r'r-r1r5r;r>r@rCrEr,rSrUrYr\r^r`rdrfrhrjrprrrtrvrxrzr|r~rrrrrrrr0rrrs8.&'/(*1.CM  '# !%@  $!"& 4  EGK N$4$$!!%  6AE*!&##')! $?+3/O >Q   > O    r