u*>SrSSKJr SSKJr SSKJr SSKJr SSKJr SSKJ r SSKJ r SS K J r S!S jr S!S jrS!S jrS!S jrS!SjrS"SjrS!SjrS!SjrS"SjrS"SjrS"SjrS"SjrS"SjrS!SjrS#SjrS$SjrSrSrSrSr Sr!S r"g)%z(Shared resource flags for kms resources.)absolute_import)division)unicode_literals)concepts)deps)concept_parsers)presentation_specs) propertiescBU(aSOSn[R"USS9$)Nzkms-key-versionz key-versionz&The KMS key version of the {resource}.name help_textr ResourceParameterAttributeConfig kms_prefixr s 3lib/googlecloudsdk/command_lib/kms/resource_args.pyKeyVersionAttributeConfigrs%( m$  2 2 C cBU(aSOSn[R"USS9$)Nzkms-keykeyzThe KMS key of the {resource}.r rrs rKeyAttributeConfigr#s$ e$  2 2 ; rcBU(aSOSn[R"USS9$)Nz kms-keyringkeyringz"The KMS keyring of the {resource}.r rrs rKeyringAttributeConfigr*s$$)$  2 2 ? rcBU(aSOSn[R"USS9$)Nzkms-key-handle key-handlez%The KMS key-handle of the {resource}.r rrs rKeyHandleAttributeConfigr1s%' \$  2 2 B rcBU(aSOSn[R"USS9$)Nzkms-ekmconnection ekmconnectionz)The KMS ekm connection of the {resource}.r rrs rEkmConnectionAttributeConfigr!8s% * $  2 2 F rcU(aSOSn/nU(a%UR[R"S55 [R"USUS9$)Nz kms-locationlocationz--regionz-The Google Cloud location for the {resource}.r r fallthroughs)appendrArgFallthroughrr)rregion_fallthroughr r%s rLocationAttributeConfigr)?sH%:$,++J78  2 2 ? rcU(aSOSn[R"US[R"[R R R5/S9$)Nz kms-projectprojectz,The Google Cloud project for the {resource}.r$)rrrPropertyFallthroughr VALUEScorer+rs rProjectAttributeConfigr/KsG$)$  2 2 >,,Z->->-C-C-K-KLM rc [R"SS[U5[U5[ U5[ US9[ US9SS9$)NzAcloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersionsz key versionrF) resource_namecryptoKeyVersionsId cryptoKeysId keyRingsId locationsId projectsIddisable_auto_completers)r ResourceSpecrrrr)r/r1s rGetKmsKeyVersionResourceSpecr:TsF   I!3J?%j1' 3)Z@':>#  rc z[R"SS[U5[U5[ XS9[ U5SS9$)Nz/cloudkms.projects.locations.keyRings.cryptoKeysrrr(F)r2r4r5r6r7r8)rr9rrr)r/r<s rGetKmsKeyResourceSpecr=asC   7%j1' 3)( 3#  rc f[R"SS[U5[XS9[ U5SS9$)Nz$cloudkms.projects.locations.keyRingsrr<F)r2r5r6r7r8)rr9rr)r/r<s rGetKmsKeyRingResourceSpecr?os;   ,' 3)( 3#  rc f[R"SS[U5[XS9[ U5SS9$)Nz&cloudkms.projects.locations.keyHandlesrr<F)r2 keyHandlesIdr6r7r8)rr9rr)r/r<s rGetKmsKeyHandleResourceSpecrB|s;   . +J7)( 3#  rc f[R"SS[U5[XS9[ U5SS9$)Nz*cloudkms.projects.locations.ekmConnectionsr r<F)r2ekmConnectionsIdr6r7r8)rr9r!r)r/r<s rGetKmsEkmConnectionResourceSpecrEs;   2#3J?)( 3#  rc R[R"SS[XS9[U5SS9$)Nzcloudkms.projects.locationsr#r<F)r2r6r7r8)rr9r)r/r<s rGetKmsLocationResourceSpecrGs3   #)( 3# rcB[R"SS[U5SS9$)Nzcloudkms.projectsr+F)r2r7r8)rr9r/r1s rGetKmsProjectResourceSpecrIs&   ' 3#  rNcU(dSRSS5nSRX5n[R"S[US9UU=(d 0S9nU$)aReturn a Presentation Spec for kms key resource argument. Args: resource: str, the name of the resource that the cryptokey will be used to protect. region_fallthrough: bool, True if the command has a region flag that should be used as a fallthrough for the kms location. flag_overrides: dict, The default flag names are 'kms-key', 'kms-keyring', 'kms-location' and 'kms-project'. You can pass a dict of overrides where the keys of the dict are the default flag names, and the values are the override names. permission_info: str, optional permission info that overrides default permission info group help. Returns: Presentation spec suitable for adding to concept parser. {} must hold permission {}2The 'Compute Engine Service Agent' service account)'Cloud KMS CryptoKey Encrypter/Decrypter'YThe Cloud KMS (Key Management Service) cryptokey that will be used to protect the {}. {}. --kms-keyr()flag_name_overrides)formatr ResourcePresentationSpecr=)resourcer(flag_overridespermission_info group_helppresentation_specs rGetKmsKeyPresentationSpecrYsc0 299<3O %%+VH%F )AA/AB(.B  rc U(dSRSS5n[RRU[ US9SRX5UUUS9R U5 g)aAdd a resource argument for a KMS key to protect other resources. Args: parser: the parser for the command. resource: str, the name of the resource that the cryptokey will be used to protect. region_fallthrough: bool, True if the command has a region flag that should be used as a fallthrough for the kms location. flag_overrides: dict, The default flag names are 'kms-key', 'kms-keyring', 'kms-location' and 'kms-project'. You can pass a dict of overrides where the keys of the dict are the default flag names, and the values are the override names. permission_info: str, optional permission info that overrides default permission info group help. required: bool, optional. True if the flag must be parsable by the parser. The default value is False. name: str, optional name of the arg for the KMS resource. Defaults to '--kms-key'. hidden: bool, optional to hide the field. True if the flag must be parsable by the parser. The default value is False. rKrLrMrPrN)rQrequiredhiddenN)rRr ConceptParser ForResourcer= AddToParser)parserrTr(rUrVr[r r\s rAddKmsKeyResourceArgrash> 299<3O++ /AB"F8=( ,Krcp[RRU[SS9SUS9R U5 g)NFr1zThe KMS key resource.r[)rr]r^r=r_r`r[r s rAddKmsKeyResourceArgForKMSres8++ u- , Krcp[RRU[SS9SUS9R U5 g)NFr1zThe KMS keyring resource.rc)rr]r^r?r_rds rAddKmsKeyringResourceArgForKMSrg8++ 51! , Krcp[RRU[SS9SUS9R U5 g)NFr1zThe KMS key-handle resource.rc)rr]r^rBr_rds r AddKmsKeyHandleResourceArgForKMSrjs8++ !U3$ , Krcp[RRU[SS9SUS9R U5 g)NFr1z The KMS ekm connection resource.rc)rr]r^rEr_rds r$AddKmsEkmConnectionResourceArgForKMSrl!s8++ %7( , Krcp[RRU[SS9SUS9R U5 g)NFr1zThe KMS location resource.rc)rr]r^rGr_rds rAddKmsLocationResourceArgForKMSrn*s8++  E2" , Krcp[RRU[SS9SUS9R U5 g)NFr1zThe KMS project resource.rc)rr]r^rIr_rds rAddKmsProjectResourceArgForKMSrp3rhr)T)TF)FNN)FNNFrOF)#__doc__ __future__rrr googlecloudsdk.calliope.conceptsrr(googlecloudsdk.command_lib.util.conceptsrr googlecloudsdk.corer rrrrr!r)r/r:r=r?rBrErGrIrYrarergrjrlrnrprrrws/&'51DG*        )^   ,^r