~SrSSKrSSKJr SSKJr SSKJr SSK J r SSK Jr SSKJr SrS S jrS rS rSS jrg)z Build utils.N) exceptions)cloudbuild_util)util)iam_util)logz&^\d+@cloudbuild\.gserviceaccount\.com$c[R"5nSUSUS3nURRURR US95R $)z5Gets the default build service account for a project.z projects/z /locations/z/defaultServiceAccountname)rGetClientInstanceprojects_locationsGetDefaultServiceAccountMESSAGES_MODULE:CloudbuildProjectsLocationsGetDefaultServiceAccountRequestserviceAccountEmail) project_idregionclientr s 0lib/googlecloudsdk/command_lib/run/build_util.py_GetDefaultBuildServiceAccountrsc  , , .& ZL F83I J$  " " ; ; WWX  cb[R"SU5nU(aURS5$g)zEExtracts the service account email from the service account resource.z/serviceAccounts/([^/]+)$N)researchgroup)service_accountmatchs r_ExtractServiceAccountEmailr's' ))0/ B% ;;q> rc[R"5upURRUR [ R "U5S95$)Nr ) iam_api_utilGetClientAndMessagesprojects_serviceAccountsGet$IamProjectsServiceAccountsGetRequestrEmailToAccountResourceName)service_account_emailrmessagess r_DescribeServiceAccountr(0sN!668&  ( ( , ,33223HI4 rcUc [X5n[U5n[R"[U5(d7[ U5nUR (a[R"SUS35egg![Ra [R"SUSUS35 g[Ra5 [R"SUS35 [R"S US 35ef=f) aUtil to validate the default build service account permission. Prompt a warning to users if cloudbuild.builds.builder is missing. Args: project_id: id of project. region: region to deploy the service. build_service_account: user provided build service account. It will be None, if user doesn't provide it. Raises: ServiceAccountError: if the build service account is disabled/not found/missing required permissions. Nz~Could not build the function due to disabled service account used by Cloud Build. Please make sure that the service account: [z ] is active.zPYour account does not have permission to check details of build service account z). If the deployment fails, please ensure z is active.zThe build service account z does not exist. If you just created this account, or if this is your first time deploying with the default build service account, it may take a few minutes for the service account to become fully available. Please try again later.zBuild service account z does not exist.)rrrr_LEGACY_BUILD_SA_FORMATr(disabledserverless_exceptionsServiceAccountErrorapitools_exceptionsHttpForbiddenErrorrwarningHttpNotFoundError)rrbuild_service_accountr&!build_service_account_descriptions r+ValidateBuildServiceAccountAndPromptWarningr49s$"::N56KL 88+-B C C*A +' + 3 3#77 &'| 5   4 D  / /KK 123/0  =  . . KK $%:$;<  3 3 !6 77GH  sAA331C.&AC.)global)N)__doc__rapitools.base.pyrr.!googlecloudsdk.api_lib.cloudbuildrgooglecloudsdk.api_lib.iamrr googlecloudsdk.command_lib.iamrgooglecloudsdk.command_lib.runr,googlecloudsdk.corerr*rrr(r4rrr>sA >=;3N#D/33r