'SrSSKJr SSKJr SSKJr SSKJr SSKrSrSr S r "S S \ 5r "S S \ 5r Srg)aModule for user service account mapping API support. Typical usage (update command): # When defining arguments user_sa_mapping_util.AddUpdateUserSaMappingFlags(parser) # When running the command user_sa_mapping_diff = user_sa_mapping_util.Diff.FromUpdateArgs(args) if user_sa_mapping_diff.HasUpdates(): orig_resource = Get(...) # to prevent unnecessary Get calls user_sa_mapping_update = user_sa_mapping_diff.Apply(user_sa_mapping_cls, orig_resource.user_sa_mapping) if user_sa_mapping_update.needs_update: new_resource.user_sa_mapping = user_sa_mapping_update.user_sa_mapping field_mask.append('user_sa_mapping') Update(..., new_resource) # Or alternatively, when running the command user_sa_mapping_update = user_sa_mapping_util.ProcessUpdateArgsLazy( args, user_sa_mapping_cls, lambda: Get(...).user_sa_mapping) if user_sa_mapping_update.needs_update: new_resource.user_sa_mapping = user_sa_mapping_update.user_sa_mapping field_mask.append('user_sa_mapping') Update(..., new_resource) )absolute_import)division)unicode_literals) arg_parsersNc2URSS9nUR5nURSS[R"5[RSS9 URSS[R "5[RS S9 URS S S 9 g )zAdds update command user service account mapping flags to an argparse parser. Args: parser: The argparse parser to add the flags to. T)mutexz--add-user-mappingsz KEY=VALUEz List of user-to-service-account mappings to add to current mappings. If a mapping exists, its value is modified; otherwise, the new mapping is added. )metavartypeactionhelpz--remove-user-mappingsKEYz List of user-to-service-account mappings to remove from the current mappings. If a mapping does not exist, it is ignored. z--identity-config-filea Path to a YAML (or JSON) file that contains the configuration for [Secure Multi-Tenancy](/dataproc/docs/concepts/iam/sa-multi-tenancy) on the cluster. The path can be a Cloud Storage URL (example: 'gs://path/to/file') or a local filesystem path. The mappings provided in the file will overwrite existing mappings. The YAML file is formatted as follows: ``` # Mapping header (first line) required. user_service_account_mapping: bob@company.com: service-account-bob@project.iam.gserviceaccount.com alice@company.com: service-account-alice@project.iam.gserviceaccount.com ``` )r N) add_group add_argumentrArgDict UpdateActionArgList)parsersecure_multi_tenancy_group!add_and_remove_user_mapping_groups Elib/googlecloudsdk/command_lib/dataproc/utils/user_sa_mapping_util.pyAddUpdateUserSaMappingFlagsr1s &//d/;&@&J&J&L##00     % %  1 $00     % % 1 )) *cUR$)zReturns the add user mapping dict from the parsed args. Args: args: The parsed args. Returns: The add user mapping dict from the parsed args. )add_user_mappingsargss rGetAddUserSaMappingDictFromArgsras   rcUR$)zReturns the remove user mapping list from the parsed args. Args: args: The parsed args. Returns: The remove user mapping list from the parsed args. )remove_user_mappingsrs r"GetRemoveUserSaMappingListFromArgsr ms  " ""rc4\rSrSrSrSr\S5rSrSr g) UpdateResultya~Result type for Diff application. Attributes: needs_update: bool, whether the diff resulted in any changes to the existing user service account mapping proto. _user_sa_mapping: UserServiceAccountMappingValue, the new populated UserServiceAccountMappingValue object. If needs_update is False, this is identical to the original UserServiceAccountMappingValue object. cXlX lgN) needs_update_user_sa_mapping)selfr&user_sa_mappings r__init__UpdateResult.__init__s$+rcRUR(d [S5eUR$)z_Returns the new user service account mapping. Raises: ValueError: if needs_update is False. zjIf no update is needed (self.needs_update == False), checking user service account mapping is unnecessary.)r& ValueErrorr'r(s rr)UpdateResult.user_sa_mappings.     B    rc<UR$![a gf=f)aHReturns the new user service account mapping if an update is needed or None otherwise. NOTE: If this function returns None, make sure not to include the user service account mapping field in the field mask of the update command. Otherwise, it's possible to inadvertently clear the user service account mapping on the resource. N)r)r-r.s r GetOrNoneUpdateResult.GetOrNones%  ! !!  s  )r'r&N) __name__ __module__ __qualname____firstlineno____doc__r*propertyr)r1__static_attributes__rrr"r"ys%,  !  ! rr"cZ\rSrSrSrS SjrSrSrSrSr S r SS jr \ S 5r S rg)Diffz/Class for diffing user service account mapping.NcXlX lg)zInitialize a Diff. Args: add_user_mapping: {str: str}, any user-to-service-account mapping to be added remove_user_mapping: List[str], any user-to-service-account mappings to be removed Returns: Diff. N_add_user_mapping_remove_user_mapping)r(add_user_mappingremove_user_mappings rr* Diff.__init__s. 3rc\UR5nURUR5 U$r%)copyupdater@)r(new_user_sa_mappings r_AddUserSaMappingDiff._AddUserSaMappings+-224t556 rcpUR5nURHnURUS5 M U$r%)rFrApop)r(rHkeys r_RemoveUserSaMappingDiff._RemoveUserSaMappings7-224((c4() rcU(d0$URVs0sHo"RUR_M sn$s snfr%)additionalPropertiesrMvalue)r(r)ls r_GetExistingUserSaMappingDict"Diff._GetExistingUserSaMappingDicts4  i$3$H$H I$HqEE177N$H II Is ;c U"[[R"U55VVs/sHup4URX4S9PM snnS9$s snnf)aConverts a dictionary representing a user service account mapping into an instance of a specified class. Args: user_sa_mapping_cls: The class to instantiate, which should have an `AdditionalProperty` inner class and an `additionalProperties` attribute. user_sa_mapping: A dictionary where keys are user identifiers and values are service account identifiers. Returns: An instance of `user_sa_mapping_cls` populated with the key-value pairs from `user_sa_mapping`. )rMrR)rQ)sortedsix iteritemsAdditionalProperty)r(user_sa_mapping_clsr)rMrRs r_PackageUserSaMappingDiff._PackageUserSaMappingsQ %S]]?%CD D  2 2s 2 HD   sA cD[URUR/5$)zaReturns true iff the diff is non-empty which means user service account mapping has been updated.)anyr@rAr.s r HasUpdatesDiff.HasUpdatess &&(A(AB CCrc URU5nUR5nUR(aURU5nUR(aUR U5nXC:gn[ UURX55$)aApply this Diff to the existing user service account mapping. Args: user_sa_mapping_cls: type, the UserServiceAccountMappingValue class for the resource. existing_user_sa_mapping: UserServiceAccountMappingValue, the existing UserServiceAccountMappingValue object for the original resource (or None, which is treated the same as empty user service account mapping) Returns: UpdateResult, the result of applying the diff. )rTrFr@rIrArNr"r\)r(r[existing_user_sa_mappingexisting_user_sa_mapping_dictnew_user_sa_mapping_dictr&s rApply Diff.Applys%)$F$F %! =AAC !%!7!7 ""   !%!:!: "",LL  ""   rc<U"URUR5$r%)rr)clsrs rFromUpdateArgsDiff.FromUpdateArgss t%%t'@'@ AArr?)NNr%)r3r4r5r6r7r*rIrNrTr\r`rf classmethodrjr9r:rrr<r<sA7 4  J ,D!FBBrr<c[RU5nUR5(aU"5OSnURX5$)aReturns the result of applying the diff constructed from args. Lazily fetches the original user service account mapping value if needed. Args: args: argparse.Namespace, the parsed arguments with add_user_mapping and remove_user_mapping user_sa_mapping_cls: type, the UserSaMappingValue class for the new user service account mapping. orig_user_sa_mapping_thunk: callable, a thunk which will return the original user_service_account_mapping object when evaluated. Returns: UpdateResult: the result of applying the diff. N)r<rjr`rf)rr[orig_user_sa_mapping_thunkdifforig_user_sa_mappings rProcessUpdateArgsLazyrqs@$   T "$&*oo&7&7 "T ' >>r)r7 __future__rrrgooglecloudsdk.callioperrXrrr objectr"r<rqr:rrrusN6''/ -`   #(6(VaB6aBH?r