>SrSSKJr SSKJr SSKJr SSKrSSKJr SSK J r SSK J r SSK Jr SS KJr SS KJr S rS rS rSr\R."S\R0"5R2R4SS9rSrSR;SR=\R>Vs/sH n\"U5PM sn55r Sr!\ RD\ RF/r$\ RJ\ RD\ RF/r&\R."S\R0"5RNRPSS9r)Sr*Sr+Sr,Sr-SSjr.Sr/Sr0Sr1S r2SS!jr3S"r4SS#jr5S$r6SS%jr7S&r8S'r9S(r:SS)jr;S*rSS-jr?S.r@SS/jrAS0rBS1rCS2rDS3rES4rFS5rGS6rHS7rIS8rJSS9jrKS:rLS;rMS<rNS=rOS>rPS?rQS@rRSArSSBrTSCrUSDrVSErWSFrXSGrYSHrZSIr[SJr\SKr]SLr^SMr_SNr`SOraSPrbSQrcSRrdSSreSTrfSUrgSVrhSWriSXrjSYrkSZrlSS[jrmS\rnS]roS^rpS_rqS`rrSSajrsSSbjrtScruSdrvSerwSfrxSgryShrzSir{Sjr|Skr}Slr~SmrSnrSSojrSprSqrSrrSSsjrStrSurSvrSwrSxrSyrSzrS{rS|rS}rS~rSSjrSrSrSrSrSrgs snf)z;Helpers for flags in commands working with GKE Multi-cloud.)absolute_import)division)unicode_literalsN)util) arg_parsers) constants) arg_utils) propertiescTURS5nSRSU55$)z'Converts hyphen-case name to CamelCase.-c3@# UHoR5v M g7f)N)title).0xs ?lib/googlecloudsdk/command_lib/container/gkemulticloud/flags.py _ToCamelCase.."s*EqEs)splitjoinnamepartss r _ToCamelCasers$ **S/% *E* **cbURS5nSRU5R5$)z(Converts hyphen-case name to SNAKE_CASE.r _)rrupperrs r_ToSnakeCaseUpperr%& **S/% %    rcbURS5nSRU5R5$)z#Converts SNAKE_CASE to hyphen-case.rr )rrlowerrs r _ToHyphenCaser#+r rcN[R"SRXU55$)Nz&Invalid value [{}] for argument {}. {})rArgumentTypeErrorformat)valueflagdetails r_InvalidValueErrorr*1s%  & &.55e6J r --node-taintsc SU;$N UNSPECIFIED)effects rr1:s -v"=r)include_filterz)Node taint is of format key=value:effect.zEffect must be one of: {}.z, zIReplica placement is of format subnetid:zone, for example subnetid12345:1--binauthz-evaluation-modec SU;$r-r/)modes rr1r1Rs T 9rc&URSSSS9 g)z(Adds the --pod-address-cidr-blocks flag.z--pod-address-cidr-blocksTzQIP address range for the pods in this cluster in CIDR notation (e.g. 10.0.0.0/8).requiredhelpN add_argumentparsers rAddPodAddressCidrBlocksr>Vs ! ( rc4[USS5nU(aU/$/$)z1Gets the value of --pod-address-cidr-blocks flag.pod_address_cidr_blocksNgetattrargs cidr_blockss rGetPodAddressCidrBlocksrFbs 7>+%+-2-rc&URSSSS9 g)z+Add the --service-address-cidr-blocks flag.z--service-address-cidr-blocksTzIIP address range for the services IPs in CIDR notation (e.g. 10.0.0.0/8).r7Nr:r<s rAddServiceAddressCidrBlocksrHhs %  rc4[USS5nU(aU/$/$)z5Gets the value of --service-address-cidr-blocks flag.service_address_cidr_blocksNrArCs rGetServiceAddressCidrBlocksrKts ;TB+%+-2-rcDURSUSRU5S9 g)zAdd the --subnet-id flag.z --subnet-idz,Subnet ID of an existing VNET to use for {}.r7Nr;r&)r= help_textr8s r AddSubnetIDrOzs) 9 @ @ Krc[USS5$)N subnet_idrArDs r GetSubnetIDrS {D ))rcBURSSRU5S9 g)zAdd an output file argument. Args: parser: The argparse.parser to add the output file argument to. help_action: str, describes the action of what will be stored. z --output-filezPath to the output file {}.r9NrMr= help_actions r AddOutputFilerYs( 9@@MrcDURSSSRU5S9 g)zAdd the --validate-only argument. Args: parser: The argparse.parser to add the argument to. help_action: str, describes the action that will be validated. z--validate-only store_truez/Validate the {}, but don't actually perform it.actionr9NrMrWs rAddValidateOnlyr^s.   < C C  rc[USS5$)N validate_onlyrArRs rGetValidateOnlyra  --rcDSnU(aUS- nURSSSUS9 g)NzzEnable node autorepair feature for a node pool. Use --no-enable-autorepair to disable. $ {command} --enable-autorepair z) Node autorepair is disabled by default. z--enable-autorepairr[r]defaultr9r:r= for_createrNs rAddEnableAutoRepairrhs;)  I L$Yrc[USS5$)Nenable_autorepairrArRs r GetAutoRepairrk *D 11rc&URSUSS9 g)Nz--cluster-versionz*Kubernetes version to use for the cluster.r7r:r=r8s rAddClusterVersionros 7rc[USS5$)Ncluster_versionrArRs rGetClusterVersionrr ($ //rc&URSUSS9 g)Nz --descriptionzDescription for the cluster.r7r:rns rAddDescriptionrus/Mrc[USS5$)N descriptionrArRs rGetDescriptionrx }d ++rc(URSSSSS9 g)zaAdds the --clear-description flag. Args: parser: The argparse.parser to add the arguments to. z--clear-descriptionr[Nz&Clear the description for the cluster.rdr:r<s rAddClearDescriptionr{s#    3 rcPURSSS9n[U5 [U5 g)ziAdds description related flags for update. Args: parser: The argparse.parser to add the arguments to. DescriptionTmutexN) add_grouprur{r=groups rAddDescriptionForUpdaters)   =  5%ercjURS[R"SS9SSRU5S9 g)Nz --annotations min_length ANNOTATIONzAnnotations for the {}.typemetavarr9)r;rArgDictr&r=nouns rAddAnnotationsrs7   ! , $ + +D 1 rcFURSSSSRU5S9 g)zAdds flag for clearing the annotations. Args: parser: The argparse.parser to add the arguments to. noun: The resource type to which the flag is applicable. z--clear-annotationsr[Nz!Clear the annotations for the {}.rdrMrs rAddClearAnnotationsrs.   . 5 5d ; rc.[USS5=(d 0$)N annotationsrArRs rGetAnnotationsr }d + 1r1rcPURSSS9n[X!5 [X!5 g)zAdds annotations related flags for update. Args: parser: The argparse.parser to add the arguments to. noun: The resource type to which the flag is applicable. AnnotationsTr~N)rrrr=rrs rAddAnnotationsForUpdaters)   =  5%e"rc&URSUSS9 g)Nz--node-versionz,Kubernetes version to use for the node pool.r7r:rns rAddNodeVersionrs 9rc[USS5$)N node_versionrArRs rGetNodeVersionr ~t ,,rc|URSUS9nURSU[SS9 URSU[SS9 g) zAdds node pool autoscaling flags. Args: parser: The argparse.parser to add the arguments to. required: bool, whether autoscaling flags are required. zNode pool autoscaling)r8z --min-nodesz)Minimum number of nodes in the node pool.)r8rr9z --max-nodesz)Maximum number of nodes in the node pool.N)add_argument_groupr;int)r=r8rs rAddAutoscalingrsZ  # #$;h # O%  6    6 rc@SnSnURnURnX4$)Nr) min_nodes max_nodes)rDrrs rGetAutoscalingParamsr4s'))nn)nn)  rc[USS5$)NrrArRs r GetMinNodesr=rTrc[USS5$)NrrArRs r GetMaxNodesrArTrc0URS[SSS9 g)Nz--max-pods-per-nodez Maximum number of pods per node.T)rr9r8r;rr<s rAddMaxPodsPerNoderEs!  - rc[USS5$)Nmax_pods_per_noderArRs rGetMaxPodsPerNoderNrlrc$URSSS9 g)Nz--azure-availability-zonez. Args: args: Arguments parsed from the command. Returns: The fleet project in format projects/ or None if the fleet projectnot is not specified. fleet_projectNz projects/{})rBisdigitr&rFGetProjectNumber)rDps rGetFleetProjectrNsPdOT*!      = =a @ AA   a  rc(URSSSSS9 g)Nz--private-endpointFr[z+If set, use private VPC for authentication.rer]r9r:r<s rAddPrivateEndpointrQs!  8 rc(URSSSSS9 g)Nz--exec-credentialFr[zBIf set, format access token as a Kubernetes execCredential object.rPr:r<s rAddExecCredentialrSs!  O rchSnU(aUS- nURS[R"SS9SUS9 g)Nz=Users that can perform operations as a cluster administrator.z> If not specified, the value of property core/account is used.z --admin-usersrrUSERrr;rr4)r=createhelp_txts r AddAdminUsersrYs? L(  PPH   ! ,  rc[US5(dgUR(a UR$[RRR R 5/$)N admin_users)hasattrr[r VALUEScoreaccount GetOrFailrRs r GetAdminUsersra sK } % %         ( ( 2 2 4 55rcPURSSS9n[U5 [U5 g)zoAdds admin group configuration flags for update. Args: parser: The argparse.parser to add the arguments to. z Admin groupsTr~N)rAddAdminGroupsAddClearAdminGroupsrs rAddAdminGroupsForUpdateres)   >  6%ercTSnURS[R"5SSUS9 g)NzI Groups of users that can perform operations as a cluster administrator. z--admin-groupsGROUPF)rrr8r9rV)r=rXs rrcrcs6(       rc(URSSSSS9 g)z]Adds the --clear-admin-groups. Args: parser: The argparse.parser to add the arguments to. z--clear-admin-groupsr[Nz2Clear the admin groups associated with the clusterrdr:r<s rrdrd-s#    ? rcb[US5(dgUR(a UR$g)N admin_groups)r\rjrRs rGetAdminGroupsrk;s* ~ & &      rcSn/nU(a [nUS- nO[nURS[R"SUS9SUS9 g) zAdds the --logging flag.z Set the components that have logging enabled. Examples: $ {command} --logging=SYSTEM $ {command} --logging=SYSTEM,WORKLOADz $ {command} --logging=NONE --loggingr)rr COMPONENTrN)_ALLOW_DISABLE_LOGGING_CHOICES_LOGGING_CHOICESr;rr4)r=allow_disabledrNlogging_choicess r AddLoggingrsCsZ+)/4O I'O   !_ E  rc,[USS5nU(dg[RU;aD[RU;d[RU;a[ SR U5SS5e[R"5nUR5nURn[RU;a2U(aURUS9$[ SR U5SS5e[RU;a[ SR U5SS5e[RU;a%URRUR5 [RU;a%URRUR5 URUS9$) aGParses and validates the value of the --logging flag. Args: args: Arguments parsed from the command. allow_disabled: If disabling logging is allowed for this cluster. Returns: The logging config object as GoogleCloudGkemulticloudV1LoggingConfig. Raises: ArgumentError: If the value of the --logging flag is invalid. loggingN,rmzFInvalid logging config. NONE is not supported with SYSTEM or WORKLOAD.)componentConfigz.Invalid logging config. NONE is not supported.z6Must include SYSTEM logging if any logging is enabled.)rBrNONESYSTEMWORKLOADr*rrr0GoogleCloudGkemulticloudV1LoggingComponentConfig(EnableComponentsValueListEntryValuesEnum'GoogleCloudGkemulticloudV1LoggingConfigenableComponentsr!SYSTEM_COMPONENTS WORKLOADS)rDrqrumessagesconfigenums r GetLoggingr^sn D)T *'  ^^w'!Y%7%77%B     ' ' )(  D D F&  8 8$^^w  = = >  ((7   :  W$  @    ""4#9#9:7" ""4>>2  9 9 : rc(SnURSUS9 g)zAdds the --image-type flag.z Set the OS image type to use on node pool instances. Examples: $ {command} --image-type=windows $ {command} --image-type=ubuntu z --image-typerVNr:r=rNs r AddImageTypers) n95rc[USS5$)N image_typerArRs r GetImageTypers |T **rc&URSSSS9 g)Nz--azure-regionTz_Azure location to deploy the cluster. Refer to your Azure subscription for available locations.r7r:r<s rAddAzureRegionrs! F rc[USS5$)N azure_regionrArRs rGetAzureRegionrrrc&URSSSS9 g)Nz--resource-group-idTz=ID of the Azure Resource Group to associate the cluster with.r7r:r<s rAddResourceGroupIdrs Jrc[USS5$)Nresource_group_idrArRs rGetResourceGroupIdrrlrc&URSSSS9 g)Nz --vnet-idTz>ID of the Azure Virtual Network to associate with the cluster.r7r:r<s r AddVnetIdrs Krc[USS5$)Nvnet_idrArRs r GetVnetIdrrrc$URSSS9 g)Nz!--service-load-balancer-subnet-idzARM ID of the subnet where Kubernetes private service type load balancers are deployed, when the Service lacks a subnet annotation.rVr:r<s rAddServiceLoadBalancerSubnetIdrs) rc[USS5$)Nservice_load_balancer_subnet_idrArRs rGetServiceLoadBalancerSubnetIdrs 8$ ??rc$URSSS9 g)Nz--endpoint-subnet-idzARM ID of the subnet where the control plane load balancer is deployed. When unspecified, it defaults to the control plane subnet ID.rVr:r<s rAddEndpointSubnetIdrs rc[USS5$)Nendpoint_subnet_idrArRs rGetEndpointSubnetIdrs +T 22rcURS5nURSUSS9 URSUSS9 U(d [U5 gg)z8Adds --azure-tenant-id and --azure-application-id flags.zAzure services authenticationz--azure-tenant-idz1ID of the Azure Tenant to manage Azure resources.r7z--azure-application-idz6ID of the Azure Application to manage Azure resources.N)rr;AddClearClient)auth_config_grouprWrs rAddAzureServicesAuthenticationrs_  . ./N O% >  C 5 rc(URSSSSS9 g)z\Adds the --clear-client flag. Args: parser: The argparse.parser to add the arguments to. z--clear-clientr[NzClear the Azure client. This flag is required when updating to use Azure workload identity federation from Azure client to manage Azure resources.rdr:r<s rrrs%      rc[USS5$)Nazure_tenant_idrArRs rGetAzureTenantIDrrsrc[USS5$)Nazure_application_idrArRs rGetAzureApplicationIDrs -t 44rcSnSnSnU(aOURSSSUS9 U(a5URSS S 9nURS SSUS9 URS SSUS9 ggURS S S 9nURSSSSS9 URSSSSS9 U(a5URSS S 9nURS SSSS9 URS SSSS9 gg)z'Adds monitoring config flags to parser.aL Enables managed collection for Managed Service for Prometheus in the cluster. See https://cloud.google.com/stackdriver/docs/managed-prometheus/setup-managed#enable-mgdcoll-gke for more info. Managed Prometheus is enabled by default for cluster versions 1.27 or greater, use --no-enable-managed-prometheus to disable. z Enables managed collection for Cloud Monitoring in the cluster. Cloud Monitoring is enabled by default for all clusters. Beginning with cluster version 1.31, use --disable-cloud-monitoring to disable. z Disables managed collection for Cloud Monitoring in the cluster. Cloud Monitoring is enabled by default for all clusters. Beginning with cluster version 1.31, use --disable-cloud-monitoring to disable. z--enable-managed-prometheusr[NrdzCloud Monitoring ConfigTr~z--disable-cloud-monitoringz--enable-cloud-monitoringzMonitoring Configz--disable-managed-prometheusz>Disable managed collection for Managed Service for Prometheus.z=Enable managed collection for Managed Service for Prometheus.z0Disable managed collection for Cloud Monitoring.z/Enable managed collection for Cloud Monitoring.)r;r)r=rgcloud_monitoring_optionprometheus_enable_help_text!cloud_monitoring_enable_help_text"cloud_monitoring_disable_help_textrs rAddMonitoringConfigrsV!'# ($  % (  8Ee  &1    %0    0  =E & M   % L  8Ee  &@   %@ rc[USS5n[USS5n[R"5nUR5nU(aSUlOU(aSUlOSn[USS5n[USS5n[R"5nUR 5nU(aSUlOU(aSUlOSnUcUcgUR UUS9$) a5Parses and validates the value of the managed prometheus and cloud monitoring config flags. Args: args: Arguments parsed from the command. Returns: The monitoring config object as GoogleCloudGkemulticloudV1MonitoringConfig. None if both enable_managed_prometheus and enable_cloud_monitoring are None. enable_managed_prometheusNdisable_managed_prometheusTFenable_cloud_monitoringdisable_cloud_monitoring)managedPrometheusConfigcloudMonitoringConfig)rBrr1GoogleCloudGkemulticloudV1ManagedPrometheusConfigenabled/GoogleCloudGkemulticloudV1CloudMonitoringConfig*GoogleCloudGkemulticloudV1MonitoringConfig)rDenabled_prometheusdisabled_prometheusrprometheus_configenabled_cloud_monitoringdisabled_cloud_monitoringcloud_monitoring_configs rGetMonitoringConfigrgst%@$G&BDI  ' ' )(@@B $ %$T+DdK%d,FM  ' ' )(>>@&*# &+#"#:#B   < </3 = rcDSnURSSURUS9S9 g)NzsAllow idempotent deletion of {resource}. The request will still succeed in case the {resource} does not exist. z--allow-missingr[)resourcer\rM)r=rrXs rAddAllowMissingrs2(   ??H? -rc[USS5$)N allow_missingrArRs rGetAllowMissingrrbrc DSnURSSURX!S9S9 g)NzForce delete an {platform} {resource}. Deletion of the {platform} {resource} will succeed even if errors occur during deleting in-{resource} resources. Using this parameter may result in orphaned resources in the {resource}. z--ignore-errorsr[)rplatformr\rM)r=rrrXs rAddIgnoreErrorsrs2(    ??H? @rc[USS5$)N ignore_errorsrArRs rGetIgnoreErrorsrrbrc URS[RVs/sHn[U5PM snSSS9 gs snf)z/Adds --binauthz-evaluation-mode flag to parser.r3Nz:Set Binary Authorization evaluation mode for this cluster.)rrer9)r;_BINAUTHZ_EVAL_MODE_ENUM_MAPPERrr)r=cs rAddBinauthzEvaluationModersI"(G(O(O(O1 A (O G s< c`[USS5nUcg[R[U55$)Nbinauthz_evaluation_mode)rBrrr#)rDevaluation_modes rGetBinauthzEvaluationModers5D"rFrHrKrOrSrYr^rarhrkrorrrurxr{rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr rrr&r0r5r8r;r=r@rCrHrNrQrSrYrarercrdrkrsrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr)rs0rr sZB&'K/HD:*+ ! !  &66  DDZZ= A188II(A(I(IJ(I1|A(IJK P$$i&8&89NN  " #,"<"<   NNll9# . . *   . 20 ,  2 #-. **28 (/     + ;,9=2*, :6 : (80 !* 6   67t 6+-2(@3"$05 7<K\,^. .   %  1<7 ,, +Q(Ks%J