k.SrSSKJr SSKJr SSKJr SSKJr SSKJr Sr Sr S S jr S!S jr S"S jr S!S jrS!SjrS!SjrSrSrSrSrSrS"SjrS!SjrS!SjrS!SjrS!SjrS!SjrS!SjrS!SjrSrSrS#Sjr g )$z?Flags and helpers for the connection profiles related commands.)absolute_import)division)unicode_literals)api_util) arg_parsersc*SnURSSUS9 g)z+Adds a --no-async flag to the given parser.zAWaits for the operation in progress to complete before returning.z --no-async store_trueactionhelpN add_argumentparser help_texts Nlib/googlecloudsdk/command_lib/database_migration/connection_profiles/flags.pyAddNoAsyncFlagrs)ls) lFrNc6U(dSnURSX!S9 g)z+Adds a --username flag to the given parser.z Username that Database Migration Service uses to connect to the database. Database Migration Service encrypts the value when storing it. z --usernamer-Nr r.s rr r Fs! I  lFrcfURUSS9nURSSS9 URSSSS 9 g ) zDAdds --password and --prompt-for-password flags to the given parser.Trz --passwordz Password for the user that Database Migration Service uses to connect to the database. Database Migration Service encrypts the value when storing it, and the field is not returned on request. rz--prompt-for-passwordr z8Prompt for the password used to connect to the database.r N)rr)rrpassword_groups rr!r!QsS##XT#B.   EGrc(SnURSX!S9 g)z%Adds --host flag to the given parser.a* IP or hostname of the database. When `--psc-service-attachment` is also specified, this field value should be: 1. For Cloud SQL PSC enabled instance - the dns_name field (e.g ..sql.goog.). 2. For Cloud SQL PSA instance (vpc peering) - the private ip of the instance. z--hostr-Nr r.s rr"r"bs)  hYBrc2SnURSX![S9 g)z%Adds --port flag to the given parser.z$ Network port of the database. z--port)r rtypeNrintr.s rr#r#ms ) hYLrc6SnURSUS[SS9 g)z)Adds --dbm-port flag to the given parser.z) The Database Mirroring (DBM) port. z --dbm-portFT)r rr4hiddenNr5rs rAddDbmPortFlagr9us)) UTrcUR5nXR:Xa [USSS9 [US5 UR5n[ USS9 [ R "U5S:Xa [USS9 g[USS9 g)zFAdds ssl server only & server client config group to the given parser.FNr8choicesTrv1alpha2) rGAAddSslTypeFlagAddCaCertificateFlagAddPrivateKeyFlagr GetApiVersionAddCertificateFlagAddClientCertificateFlag)r release_track ssl_config client_certs rAddSslConfigGrouprHsq!*&&&:eT:z4($$&+K$/ M*j8{T2[48rc<UR5n[US5 g)z6Adds ssl server only config group to the given parser.TN)rr@rrFs rAddSslServerOnlyConfigGrouprKs!*z4(rcTUR5n[US/SQS9 [U5 g)zAAdds ssl server only & required config group to the given parser.F) SERVER_ONLYREQUIREDNONEr;N)rr?r@rJs r%AddSslServerOnlyOrRequiredConfigGrouprPs*!*(Kz"rcRSnURS[R"5SUS9 g)z,Adds a --ssl-flags flag to the given parser.z Comma-separated list of SSL flags used for establishing SSL connection to the database. Use an equals sign to separate the flag name and value. Example: `--ssl-flags ssl_mode=enable,server_certificate_hostname=server.com`. z --ssl-flagsz FLAG=VALUE)r4metavarr N)rrArgDictrs r AddSslFlagsrTs3)        rcBSnU(d/SQnURSUUUS9 g)z)Adds --ssl-type flag to the given parser.z% The type of SSL configuration. )rM SERVER_CLIENTrNrOz --ssl-type)r r<r8Nr )rr8r<rs rr?r?s2) BG   rc(SnURSX!S9 g)z/Adds --ca-certificate flag to the given parser.a x509 PEM-encoded certificate of the CA that signed the database server's certificate. The value for this flag needs to be the content of the certificate file, not the path to the file. For example, on a Linux machine you can use command substitution: --ca-certificate=$(. Database Migration Service will use this certificate to verify it's connecting to the correct host. Database Migration Service encrypts the value when storing it. z--ca-certificater-Nr r.s rr@r@s ) (yLrc(SnURSX!S9 g)z,Adds --certificate flag to the given parser.ag x509 PEM-encoded certificate that will be used by the replica to authenticate against the database server. The value for this flag needs to be the content of the certificate file, not the path to the file. For example, on a Linux machine you can use command substitution: --ca-certificate=$(. z --certificater-Nr r.s rrCrCs) oIIrc(SnURSX!S9 g)z3Adds --client-certificate flag to the given parser.a x509 PEM-encoded certificate that will be used by the replica to authenticate against the database server. The value for this flag needs to be the content of the certificate file, not the path to the file. For example, on a Linux machine you can use command substitution: --ca-certificate=$(. Database Migration Service encrypts the value when storing it. z--client-certificater-Nr r.s rrDrDs) ,9Prc(SnURSX!S9 g)z,Adds --private-key flag to the given parser.a Unencrypted PKCS#1 or PKCS#8 PEM-encoded private key associated with the Client Certificate. The value for this flag needs to be the content of the certificate file, not the path to the file. For example, on a Linux machine you can use command substitution: --ca-certificate=$(. Database Migration Service encrypts the value when storing it. z --private-keyr-Nr r.s rrArAs) oIIrc(SnURSX!S9 g)z)Adds --instance flag to the given parser.zt If the source is a Cloud SQL database, use this field to provide the Cloud SQL instance ID of the source. z --instancer-Nr r.s rAddInstanceFlagr\s) lFrc(SnURSX!S9 g)z2Adds --cloudsql-instance flag to the given parser.z If the source or destination is a Cloud SQL database, then use this field to provide the respective Cloud SQL instance ID. z--cloudsql-instancer-Nr r.s rAddCloudSQLInstanceFlagr^s) +)Orc(SnURSX!S9 g)z4Adds the --alloydb-cluster flag to the given parser.zf If the destination is an AlloyDB cluster, use this field to provide the AlloyDB cluster ID. z--alloydb-clusterr-Nr r.s rAddAlloydbClusterFlagr`s) ) Mrc0SnSS/nURSXS9 g)z)Adds --provider flag to the given parser.z0 Database provider, for managed databases. RDSCLOUDSQLz --providerr r<Nr rrr<s rAddProviderFlagrf s()J 'lDrc0SnSS/nURSXS9 g)z%Adds --role flag to the given parser.z#The role of the connection profile.SOURCE DESTINATIONz--rolerdNr res r AddRoleFlagrjs$3) } %'hY@rc SnU(aURSUSSSSUS9 g URUSSS9nURSUSSSSSS9 URS USSSSSS9 g ) z:Adds --enable-iam-authentication flag to the given parser.zUse IAM database authentication to connect to the database. The username will be overridden by the DMS service agent principal. This flag is only supported for PostgreSQL Destinations.z--enable-iam-authentication store_constTenable_iam_authentication)r r constdestr8r)rrr8Fz--disable-iam-authenticationN)rr)rrrriam_authentication_groups rrrsB  %  ( &//d 0 ))%  (*))&  (*r)TFF)F)FN)FF)!__doc__ __future__rrr)googlecloudsdk.api_lib.database_migrationrgooglecloudsdk.callioperrrr+r$r r!r"r#r9rHrKrPrTr?r@rCrDrAr\r^r`rfrjrrrrvsF&'>/I859GL;*GGG"CM 9) #   M J Q JGPNEA&r