\SrSSKJr SSKJr SSKJr SSKJr SSKJ r SSKJ r SSKJr SSK J r SS K J r SS KJr SS KJr SS KJr SS KJr SSKJr SrSrSrSrSrS\-rSr"SS\R:5r"SS\R>5r"SS\5r \RB"\RDRF5"SS\55r$"SS\5r%"S S!\5r&\RB"\RDRF5"S"S#\55r'"S$S%\5r(\RB"\RDRF\RDRR5"S&S'\55r*\ S(4\%S(4\'S(4\&S(4\*S(4S).r+SoS*jr,SoS+jr-SpS-jr.SpS.jr/SqS/jr0SqS0jr1S1r2S2r3S3r4S4r5S5r6S6r7S7r8S8r9S9r:S:r;S;rS>r?S?r@S@rASArBSBrCSCrDSDrESErFSFrGSGrHSHrISIrJSJrKSKrLSLrMSMrNSNrOSOrPSPrQSQrRSRrSSSrTSTrUSUrVSVrWSWrXSXrYSYrZSqSZjr[S[r\SqS\jr]SqS]jr^S^r_SqS_jr`SqS`jraSarbSqSbjrcScrdSdreSerfSfrgSgrhShriSirjSjrkSkrlSlrmSmrnSnrog,)rz(Helpers for parsing flags and arguments.)absolute_import)division)unicode_literals)base)actions) arg_parsers)maps) resource_args) completers)parameter_info_lib) properties) resources)timesz*cloudkms.projects.locations.ekmConnectionsz$cloudkms.projects.locations.keyRingsz&cloudkms.projects.locations.keyHandleszcloudkms.projects.locationsz/cloudkms.projects.locations.keyRings.cryptoKeysz%s.cryptoKeyVersionsz/cloudkms.projects.locations.keyRings.importJobsc2^\rSrSrSU4SjjrSrU=r$)ListCommandParameterInfo-c,>[[U] UUUUS9$)N)parameter_valuecheck_properties for_update)superrGetFlag)selfparameter_namerrr __class__s +lib/googlecloudsdk/command_lib/kms/flags.pyr ListCommandParameterInfo.GetFlag/s+ )4 8') 9 )NTF)__name__ __module__ __qualname____firstlineno__r__static_attributes__ __classcell__rs@rrr-s   rrc\rSrSrSrSrg)ListCommandCompleter>c6[UUUR[S9$)N)updaters)r collectionCOMPLETERS_BY_CONVENTION)r parsed_argsarguments r ParameterInfo"ListCommandCompleter.ParameterInfo@s # )  rrN)r r!r"r#r0r$rrrr(r(>srr(c(^\rSrSrU4SjrSrU=r$)LocationCompleterLc <>[[U] "S[SS.UD6 g)Nzkms locations list --uri)r, list_commandr)rr3__init__LOCATION_COLLECTIONrkwargsrs rr7LocationCompleter.__init__Ns( T+&/ rrr r!r"r#r7r$r%r&s@rr3r3Ls rr3c(^\rSrSrU4SjrSrU=r$)EkmConnectionCompleterVc @>[[U] "S[SS/S.UD6 g)Nzkms ekm-connections list --urilocationr,r6flagsr)rr>r7EKM_CONNECTION_COLLECTIONr9s rr7EkmConnectionCompleter.__init__Ys- $0,5l  rrr<r&s@rr>r>V rr>c(^\rSrSrU4SjrSrU=r$)KeyRingCompleterbc @>[[U] "S[SS/S.UD6 g)Nzkms keyrings list --urirArBr)rrHr7KEY_RING_COLLECTIONr9s rr7KeyRingCompleter.__init__ds- D*&.l  rrr<r&s@rrHrHb rrHc(^\rSrSrU4SjrSrU=r$) KeyCompletermc B>[[U] "S[SSS/S.UD6 g)Nzkms keys list --urirAkeyringrBr)rrOr7CRYPTO_KEY_COLLECTIONr9s rr7KeyCompleter.__init__os/ ,&(*9%  rrr<r&s@rrOrOmrMrrOc(^\rSrSrU4SjrSrU=r$)KeyHandleCompleterxc @>[[U] "S[SS/S.UD6 g)Nzkms key-handles list --urirArBr)rrVr7KEY_HANDLE_COLLECTIONr9s rr7KeyHandleCompleter.__init__{s- d,(1l  rrr<r&s@rrVrVxrFrrVc(^\rSrSrU4SjrSrU=r$)KeyVersionCompleterc B>[[U] "S[S/SQS.UD6 g)Nzkms keys versions list --uri)rAkeyrRrBr)rr\r7CRYPTO_KEY_VERSION_COLLECTIONr9s rr7KeyVersionCompleter.__init__s+ t-03,  rrr<r&s@rr\r\rMrr\c(^\rSrSrU4SjrSrU=r$)ImportJobCompleterc B>[[U] "S[SSS/S.UD6 g)Nzbeta kms import-jobs list --urirArRrBr)rrcr7IMPORT_JOB_COLLECTIONr9s rr7ImportJobCompleter.__init__s0 d,(69%  rrr<r&s@rrcrcrFrrcF)rArRz key-handler_z import-jobscLURS[SRU5S9 g)N --locationzLocation of the {0}. completerhelp) add_argumentr3formatparserresources rAddLocationFlagrrs)! ! ( ( 2rcLURS[SRU5S9 g)N --keyringzKey ring of the {0}.rjrmrHrnros rAddKeyRingFlagrvs) ! ( ( 2rNc@URS[U=(d SS9 g)N--keyzThe containing key.rj)rmrOrp help_texts rAddCryptoKeyFlagr{s" I,N9NrcJ[US5 [US5 [X5 g)NrRr_)rrrvr{rys rAddKeyResourceFlagsr}s&)$6%rcNURSU[SRU5S9 g)Nz --versionz Version {0}.requiredrkrlrmr\rnrp help_actionrs rAddCryptoKeyVersionFlagrs,#   - rcNURSU[SRU5S9 g)Nz--primary-versionzPrimary version {0}.rrrs rAddCryptoKeyPrimaryVersionFlagrs,# ! ( ( 5 rcJURS[R"SS9SS9 g)Nz--rotation-period1d) lower_boundzgAutomatic rotation period of the key. See $ gcloud topic datetimes for information on duration formats.typerlrmrDurationrps rAddRotationPeriodFlagrs,   D 1 J rcVURS[RRSS9 g)Nz--next-rotation-timezfNext automatic rotation time of the key. See $ gcloud topic datetimes for information on time formats.r)rmrDatetimeParsers rAddNextRotationTimeFlagrs-    % % F rc&URSSSS9 g)Nz--remove-rotation-schedule store_truez1Remove any existing rotation schedule on the key.)actionrlrmrs rAddRemoveRotationScheduleFlagrs"  >rc*URSSSSSS9 g)Nz--skip-initial-version-creationrskip_initial_version_creationzSSkip creating the first version in a key and setting it as primary during creation.defaultrdestrlrrs r!AddSkipInitialVersionCreationFlagrs&'  * %  rcDURSSRU5SS9 g)Nz--plaintext-filez$File path of the plaintext file {0}.Trlrrmrnrprs rAddPlaintextFileFlagrs) 1 8 8 ErcDURSSRU5SS9 g)Nz--shared-secret-filez(File path of the shared secret file {0}.Trrrs rAddSharedSecretFileFlagrs) 5 < <[ IrcDURSSRU5SS9 g)Nz--ciphertext-filez%File path of the ciphertext file {0}.Trrrs rAddCiphertextFileFlagrs) 2 9 9+ FrcDURSSRU5SS9 g)Nz--signature-filezPath to the signature file {}.Trrrs rAddSignatureFileFlagrs) + 2 2; ?rcDURSSRU5SS9 g)Nz --input-filezPath to the input file {}.Trrrs rAddInputFileFlagr s) ' . .{ ;rc lURSSRU5S[R"SSS9S9 g)Nz--rsa-aes-wrapped-key-filez(Path to the wrapped RSA AES key file {}.TzxThe {flag_name} flag is deprecated but will continue to be supported. Prefer to use the --wrapped-key-file flag instead.)warn)rlhiddenr)rmrnrDeprecationActionrs rAddRsaAesWrappedKeyFileFlagr(s@" 5 < <[ I   & & &N  rcBURSSRU5S9 g)Nz--wrapped-key-filez,Path to the RSA/RSA+AES wrapped key file {}.rlrrs rAddWrappedKeyFileFlagr7s& 9 @ @ MrcBURSSRU5S9 g)Nz --output-filezPath to the output file {}.rrrs rAddOutputFileFlagr>s&9@@Mrc$URSSS9 g)Nz$--additional-authenticated-data-filezLFile path to the optional file containing the additional authenticated data.rrrs rAddAadFileFlagrDs, rcBURSSRU5S9 g)Nz--initialization-vector-filezGFile path to the optional file containing the initialization vector {}.rrrs r AddIvFileFlagrNs'$ vk* rc,URS/SQSSS9 g)N--protection-level)softwarehsmexternalz external-vpcrzProtection level of the key.)choicesrrlrrs rAddProtectionLevelFlagrXs!= ) rc,URSSS/SSS9 g)Nrrrz#Protection level of the import job.Trrlrrrs rAddRequiredProtectionLevelFlagras&5! 0 rc$URSSS9 g)Nz--attestation-filez$Path to the output attestation file.rrrs rAddAttestationFileFlagrjs!GrcTURS[[R5SS9 g)Nz--default-algorithmzThe default algorithm for the crypto key. For more information about choosing an algorithm, see https://cloud.google.com/kms/docs/algorithms.rrl)rmsortedr ALL_ALGORITHMSrs rAddDefaultAlgorithmFlagrps+T(() : rcpURS[[RR5SSSSS9 g)Nz--import-methodzThe wrapping method to be used for incoming key material. For more information about choosing an import method, see https://cloud.google.com/kms/docs/key-wrapping.Tr)rmrr IMPORT_METHOD_MAPPERrrs rAddRequiredImportMethodFlagr|s=T..667; < rc$URSSS9 g)Nz--public-key-filezPath to the public key of the ImportJob, used to wrap the key for import. If missing, the public key will be fetched on your behalf.rrrs rAddPublicKeyFileFlagrs Orc$URSSS9 g)Nz--target-key-filezPath to the unwrapped target key to import into a Cloud KMS key version. If specified, the key will be securely wrapped before transmission to Google.rrrs rAddTargetKeyFileFlagrs %rcTURS[[R5US9 g)Nz--digest-algorithmr)rmrr DIGESTSrs rAddDigestAlgorithmFlagrs%F4<<$8{rcVURS[[R5SSS9 g)Nz --algorithmzThe algorithm to assign to the new key version. For more information about supported algorithms, see https://cloud.google.com/kms/docs/algorithms.Tr)rmrr ALGORITHMS_FOR_IMPORTrs rAddImportedVersionAlgorithmFlagrs0T//0 : rc(URSS/SS9 g)Nz--external-key-uriz --key-urizFThe URI of the external key for keys with protection level "external".)suggestion_aliasesrlrrs rAddExternalKeyUriFlagrs"%  rc$URSSS9 g)Nz--ekm-connection-key-pathz_The path to the external key material on the EKM for keys with protection level "external-vpc".rrrs rAddEkmConnectionKeyPathFlagrs! -rc&URSSSS9 g)Nz--statestatezState of the key version.)rrlrrs r AddStateFlagrsig4OPrc*URSSSSSS9 g)Nz--skip-integrity-verificationrskip_integrity_verificationz?Skip integrity verification on request and response API fields.rrrs rAddSkipIntegrityVerificationrs$%  ( L rcJURS[R"SS9SS9 g)Nz--destroy-scheduled-duration120d) upper_boundzThe amount of time that versions of the key should spend in the DESTROY_SCHEDULED state before transitioning to DESTROYED. See $ gcloud topic datetimes for information on duration formats.rrrs rAddDestroyScheduledDurationFlagrs,$   F 3 J rc$URSSS9 g)Nz--crypto-key-backendaThe resource name of the backend environment where the key material for all CryptoKeyVersions associated with this CryptoKey reside and where all related cryptographic operations are performed. Currently only applicable for EXTERNAL_VPC and EkmConnection resource names.rrrs rAddCryptoKeyBackendFlagrs Prc*URSSSSSS9 g)Nz --import-onlyr import_onlyz,Restrict this key to imported versions only.rrrs rAddImportOnlyFlagrs$   9 rc URS[R"[RR [ [RR 5S9SSS9 g)Nz--allowed-access-reasons)r max_lengthALLOWED_ACCESS_REASONSauThe list of allowed Key Access Justifications access reasons on the key. The key must be enrolled in Key Access Justifications to configure this field. By default, this field is absent, and all justification codes are allowed. For more information about justification codes, see https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes.)rmetavarrl)rmrArgListr ACCESS_REASON_MAPPERrlenrs rAddAllowedAccessReasonsFlagrsT   ++3322::; ' krc(URSSSSS9 g)Nz)--remove-key-access-justifications-policyrz`Removes the Key Access Justifications policy on the key, making all justification codes allowed.)rrrlrrs r*AddRemoveKeyAccessJustificationsPolicyFlagr s#1  - rc&URSSSS9 g)Nz--public-key-formatz4The format in which the public key will be returned.)rrlrrs rAddPublicKeyFormatFlagrs ArcLURS[SRU5S9 g)NrRzName of the key ring {0}.rjrurs rAddKeyRingArgumentrs) & - -k :rcLURS[SRU5S9 g)Nr_zName of the key {0}.rj)rmrOrnrs rAddCryptoKeyArgumentr&s)  ! ( ( 5rcJ[US5 [US5 [X5 g)Nr_)rrrvrrs rAddKeyResourceArgumentr.s&% v+rcLURS[SRU5S9 g)NversionzName of the version {0}.rjrrs rAddCryptoKeyVersionArgumentr4s)# % , ,[ 9rc0[U5 [X5 gN)r}rrs rAddKeyVersionResourceArgumentr<sff2rcLURS[SRU5S9 g)N import_jobName of the import job {0}.rjrmrcrnrs rAddPositionalImportJobArgumentr As)" ( / / <rcNURS[SRU5SS9 g)Nz --import-jobrT)rkrlrrrs rAddRequiredImportJobArgumentr Is," ( / / < rc,URSS/SQSS9 g)Nz--certificate-chain-typeall)r caviumz google-cardzgoogle-partitionzCertificate chain to retrieve.)rrrlrrs rAddCertificateChainFlagrRs! B + rc&URSSUS9 g)Nz--service-directory-servicezNThe resource name of the Service Directory service pointing to an EKM replica.rrrprs rAddServiceDirectoryServiceFlagr[s"#  rc$URSSS9 g)Nz--endpoint-filterzyThe filter applied to the endpoints of the resolved service. If no filter is specified, all endpoints will be considered.rrrs rAddEndpointFilterFlagrfs Irc&URSSUS9 g)Nz --hostnamezs\    ! ! "))..66@@,,\:+ " rc[RRUR[R R RRURS5S.[S9$r:) rr1rrRr r2r3r4r5r=rKr6s rParseKeyRingNamer@sZ    ! ! ll"))..66@@,,\:% " rc[RRURUR S5UR S5[ R RRRS.[S9$Nrtri) keyRingsIdr;r.r/) rr1rr_r=r r2r3r4r5rSr6s rParseCryptoKeyNamerDsh    ! ! hh++K8,,\:"))..66@@ ' " rc[RRURUR S5UR S5UR S5[ R RRRS.[S9$)Nrxrtri) cryptoKeysIdrCr;r.r/) rr1rrr=r r2r3r4r5r`r6s rParseCryptoKeyVersionNamerGsv    ! ! ll--g6++K8,,\:"))..66@@  / "  rc[RRURUR S5UR S5[ R RRRS.[S9$rB) rr1rrr=r r2r3r4r5rfr6s rParseImportJobNamerIsh    ! ! oo++K8,,\:"))..66@@ ' " rcUR5RS5nSRUSS5nUR5nX1SS- [R R "U40UD6$)N.Id) CollectionsplitjoinAsDictrr1Create) resource_refcollection_listparent_collectionr0s rParseParentFromResourcerVsl ++-33C8/hhs34    & R 4 '(    " "#4 ? ??rc`URb!SRUR5UlggNz{0}s)rotation_periodrnrotationPeriodr7 crypto_keys rSetRotationPeriodr](s* % & d.B.B CJ&rcjURb&[R"UR5Ulggr)next_rotation_timerFormatDateTimenextRotationTimer[s rSetNextRotationTimerb-s, ("'"6"6t7N7N"OJ)rc`URb!SRUR5UlggrX)destroy_scheduled_durationrndestroyScheduledDurationr[s rSetDestroyScheduledDurationrf2s- $$0*0-- ''+J'1rc [R"5nURba/nURH:n[RR U5nXS;dM)UR U5 M< URUS9Ulgg)N)allowedAccessReasons) cloudkms_baseGetMessagesModuleallowed_access_reasonsr rGetEnumForChoiceappendKeyAccessJustificationsPolicykeyAccessJustificationsPolicy)r7r\messagesrk access_reason reason_strings r SetKeyAccessJustificationsPolicyrs9s  , , .(   ,44 //@@Om  4%%m45 ..!7 / , -r)rqr)F)p__doc__ __future__rrrgooglecloudsdk.api_lib.cloudkmsrrigooglecloudsdk.callioperrgooglecloudsdk.command_lib.kmsr r googlecloudsdk.command_lib.utilr r googlecloudsdk.corer rgooglecloudsdk.core.utilrrDrKrYr8rSr`rfParameterInfoByConventionrr(r3 ReleaseTracks ReleaseTrackALPHAr>rHrOrVr\BETArcr-rrrvr{r}rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr r rrrrrrr!r#r'r)r,r8r>r@rDrGrIrVr]rbrfrsrrrrs/&'A+/(/86>*)*H<@3J 69N NI1KK":::,D%%++,1-+'D%%++,--.D%%++T->->-C-CD-E#E* %(%u- % &.  &       Q  & , 3  <     @D P  r