ó €Ï ãó\•SrSSKJr SSKJr SSKJr SSKJr SSKJr SSK Jr Sr Sr g ) zEUtility functions for Functions specific to deploying Gen2 functions.é)Úabsolute_import)Údivision)Úprint_function)Úunicode_literals)Úutilcó¤•SR[R"[R"555n[R "USS/SS9 g)zÄEnsures the project's Pub/Sub service account has permission to create tokens. If the permission is missing, prompts the user to grant it. If the console cannot prompt, prints a warning instead. z0service-{}@gcp-sa-pubsub.iam.gserviceaccount.comz$roles/iam.serviceAccountTokenCreatorzroles/pubsub.serviceAgentzˆPub/Sub needs this role to create identity tokens. For more details, please see https://cloud.google.com/pubsub/docs/push#authentication)Ú alt_rolesÚreasonN)ÚformatÚ projects_utilÚGetProjectNumberÚapi_utilÚ GetProjectÚPromptToBindRoleIfMissing)Ú pubsub_sas Ú:lib/googlecloudsdk/command_lib/functions/v2/deploy_util.pyÚ'ensure_pubsub_sa_has_token_creator_rolersN€ð A×GÑGÜ×$Ò$¤X×%8Ò%8Ó%:Ó;ó€)ô ×$Ò$ØØ,Ø,Ð-ð Eó ócóª•UVs/sHoRS:XdMUPM nnU(a$[R"USR5 ggs snf)z÷Ensures appropriate Data Access Audit Logs are enabled for the given event filters. If they're not, the user will be prompted to enable them or warned if the console cannot prompt. Args: trigger_event_filters: the CAL trigger's event filters. Ú serviceNamerN)Ú attributerÚ!PromptToEnableDataAccessAuditLogsÚvalue)Útrigger_event_filtersÚfÚservice_filters rÚ#ensure_data_access_logs_are_enabledr1sR€ñ'óÚ&ˆA¯+©+¸Ñ*F‡aÑ&ððöÜ ×.Ò.¨~¸aÑ/@×/FÑ/FÕGðùòs …AœAN) Ú__doc__Ú __future__rrrrÚ#googlecloudsdk.api_lib.functions.v2rrÚ#googlecloudsdk.command_lib.projectsr rr©rrÚr#s*ðñLõ'ÝÝ%Ý'å@ÝEòó,Hr