pSrSSKJr SSKJr SSKJr SSKrSSKJr SSKJr SSKJ r SS K J r SS K J r SS K Jr SS KJr S rSrSrSrSrSrSNSjrSNSjrSNSjrSrSOSjrSPSjrSQSjrSQSjrSQSjrSr Sr!Sr"SQSjr#SQS jr$SQS!jr%S"r&SQS#jr'SQS$jr(SQS%jr)S&r*SQS'jr+SQS(jr,SQS)jr-SQS*jr.SQS+jr/S,r0S-r1S.r2S/r3S0r4S1r5SQS2jr6S3r7S4r8SQS5jr9S6r:S7r;S8rS;r?S<r@S=rAS>rBS?rCS@rDSArESBrFSCrGSDrHSErISFrJSRSGjrKSQSHjrLSIrMSJrNSKrOSLrPSMrQg)Sz.Flags for Workstation Config related commands.)absolute_import)division)unicode_literalsN)actions) arg_parsers)base)concepts)deps)concept_parsers) propertiescB[RRU5 g)zAdds --async flag.N)r ASYNC_FLAG AddToParser)parsers 4lib/googlecloudsdk/command_lib/workstations/flags.py AddAsyncFlagr s//f%c*SnURSSUS9 g)zPAdds a --allow-unauthenticated-cors-preflight-requests flag to the given parser. By default, the workstations service makes sure that all requests to the workstation are authenticated. CORS preflight requests do not include cookies or custom headers, and so are considered unauthenticated and blocked by the workstations service. Enabling this option allows these unauthenticated CORS preflight requests through to the workstation, where it becomes the responsibility of the destination server in the workstation to validate the request /--allow-unauthenticated-cors-preflight-requests store_trueactionhelpN add_argumentr help_texts r0AddAllowUnauthenticatedCorsPreflightRequestsFlagr%s') 7  rcpSnUR5nURSSUS9 SnURSSUS9 g)zSAdds a --disallow-unauthenticated-cors-preflight-requests flag to the given parser.rrrrJ If set, requires that all requests to the workstation are authenticated.z2--disallow-unauthenticated-cors-preflight-requestsNadd_mutually_exclusive_grouprrrgroups r9AddDisallowUnauthenticatedCorsPreflightRequestsToggleFlagr&7sY)  - - /%7   N):  rc*SnURSSUS9 g)z@Adds a --disable-localhost-replacement flag to the given parser.e By default, the workstations service replaces references to localhost, 127.0.0.1, and 0.0.0.0 with the workstation's hostname in http responses from the workstation so that applications under development run properly on the workstation. This may intefere with some applications, and so this option allows that behavior to be disabled. --disable-localhost-replacementrrNrrs r"AddDisableLocalhostReplacementFlagr*Ss') '  rcpSnUR5nURSSUS9 SnURSSUS9 g)z?Adds a --enable-localhost-replacement flag to the given parser.r(r)rrr!z--enable-localhost-replacementNr"r$s r(AddDisableLocalhostReplacementToggleFlagr,csY)  - - /%'   N)&  rc SnURSS[R"[[S.SS/S9[R"5US9 g ) z0Adds a --allowed-ports flag to the given parser.a< A Single or Range of ports externally accessible in the workstation. If not specified defaults to ports 22, 80 and ports 1024-65535. To specify a single port, both first and last should be same. Example: $ {command} --allowed-ports=first=9000,last=9090 $ {command} --allowed-ports=first=80,last=80z--allowed-ports ALLOWED_PORTS)firstlastr/r0spec required_keysmetavartyperrN)rr ArgObjectint FlattenActionrs rAddAllowedPortsFlagr:}sX 4)    !&)   & & (  rc&/nU(aGUR[R"[RR R 55 U(a%UR[R"SSS95 [R"SUSS9$)a Create a location attribute in resource argument. Args: location_fallthrough: If set, enables fallthroughs for the location attribute. global_fallthrough: If set, enables global fallthroughs for the location attribute. Returns: Location resource argument parameter config cgN-r?rr*LocationsAttributeConfig..srzdefault is all regionshintregionzThe region for the {resource}.name fallthroughsr) appendr PropertyFallthroughr VALUES workstationsrD Fallthroughr ResourceParameterAttributeConfig)location_fallthroughglobal_fallthroughrGs rLocationsAttributeConfigrPs|,   !2!2!?!?!F!FG +CD  2 2 0 rc&/nU(aGUR[R"[RR R 55 U(a%UR[R"SSS95 [R"SUSS9$)aCreate a cluster attribute in resource argument. Args: cluster_fallthrough: If set, enables fallthroughs for the cluster attribute. global_fallthrough: If set, enables global fallthroughs for the cluster attribute. Returns: Cluster resource argument parameter config cgr=r?r?rrr@)ClustersAttributeConfig..Crzdefault is all clustersrBclusterzThe cluster for the {resource}.rE) rHr rIr rJrKrUrLr rM)cluster_fallthroughrOrGs rClustersAttributeConfigrWs,   !2!2!?!?!G!GH  *   2 2 1 rc&/nU(aGUR[R"[RR R 55 U(a%UR[R"SSS95 [R"SUSS9$)aACreate a config attribute in resource argument. Args: config_fallthrough: If set, enables fallthroughs for the config attribute using the value set in workstations/config. global_fallthrough: If set, enables global fallthroughs for the config attribute. Returns: Config resource argument parameter config cgr=r?r?rrr@(ConfigsAttributeConfig..rTrzdefault is all configsrBconfigzThe config for the {resource}.rE) rHr rIr rJrKr[rLr rM)config_fallthroughrOrGs rConfigsAttributeConfigr]s,   !2!2!?!?!F!FG  )   2 2 0 rc,[R"SSS9$)zpCreate a workstation attribute in resource argument. Returns: Workstation resource argument parameter config workstationzThe workstation.)rFr)r rMr?rrWorkstationsAttributeConfigr`s  2 2 " rc [R"SSU[US9[SUS9[ SUS9[R SS9n[ RRU(aS OSUS SS 9RU5 g ) z"Create a config resource argument.zFworkstations.projects.locations.workstationClusters.workstationConfigsr[)rOT)rVrO)rNrOF) resource_name api_versionworkstationConfigsIdworkstationClustersId locationsId projectsIddisable_auto_completersz--configz(The group of arguments defining a configrequiredN) r ResourceSpecr]rWrP DEFAULT_PROJECT_ATTRIBUTE_CONFIGr ConceptParser ForResourcer)rrc flag_anchorrOr2s rAddConfigResourceArgrps   N1/4"7I+#8J::# $ ++jX 0 , Krc [R"SSU[5[SS9[ SS9[ SS9[R S9n[RRSUSSS 9RU5 g ) z'Create a workstation resource argument.zSworkstations.projects.locations.workstationClusters.workstationConfigs.workstationsr_T)r\)rV)rN)rbrcworkstationsIdrdrerfrgz-The group of arguments defining a workstationriN) r rkr`r]rWrPrlr rmrnr)rrcr2s rAddWorkstationResourceArgrssu   [!021TJ3M*E:: $++ 5 , KrcFSnURSU(aSOS[US9 g)z0Adds an --idle-timeout flag to the given parser.z How long (in seconds) to wait before automatically stopping an instance that hasn't received any user traffic. A value of 0 indicates that this instance should never time out due to idleness. z--idle-timeout Ndefaultr6rrr8r use_defaultrs rAddIdleTimeoutFlagr{1s.)  !dt   rcFSnURSU(aSOS[US9 g)z3Adds an --running-timeout flag to the given parser.z How long (in seconds) to wait before automatically stopping a workstation after it started. A value of 0 indicates that workstations using this config should never time out. z--running-timeoutruNrvrxrys rAddRunningTimeoutFlagr}@s.)  !dt   rcFSnURS[U(aSOSUS9 g)z/Adds a --machine-type flag to the given parser.z Machine type determines the specifications of the Compute Engine machines that the workstations created under this configuration will run on.z--machine-typez e2-standard-4Nr6rwrrstrrys rAddMachineTypeFlagrOs/I)  !,o$  rc(SnURSUS9 g)z2Adds a --service-account flag to the given parser.a% Email address of the service account that will be used on VM instances used to support this config. This service account must have permission to pull the specified container image. If not set, VMs will run without a service account, in which case the image must be publicly accessible.z--service-accountrNrrs rAddServiceAccountFlagr\s:)  ) :rcRSnURSS[R"5US9 g)z9Adds a --service-account-scopes flag to the given parser.z Scopes to grant to the service_account. Various scopes are automatically added based on feature usage. When specified, users of workstations under this configuration must have iam.serviceAccounts.actAs` on the service account. z--service-account-scopesSERVICE_ACCOUNT_SCOPESr5r6rNrrArgListrs rAddServiceAccountScopesrfs3)   &     rcRSnURSS[R"5US9 g)z/Adds a --network-tags flag to the given parser.z Network tags to add to the Google Compute Engine machines backing the Workstations. Example: $ {command} --network-tags=tag_1,tag_2 z--network-tags NETWORK_TAGSrNrrs rAddNetworkTagsrvs3)      rcFSnURSU(aSOS[US9 g)z,Adds a --pool-size flag to the given parser.z= Number of instances to pool for faster Workstation startup.z --pool-sizerNrvrxrys r AddPoolSizers-A)aD   rc>SnURSSU(aSOSUS9 g)z>Adds a --disable-public-ip-addresses flag to the given parser.zM Default value is false. If set, instances will have no public IP address.z--disable-public-ip-addressesrFNrrwrrrys rAddDisablePublicIpAddressesrs.7) % "e  rc>SnURSSU(aSOSUS9 g)z:Adds a --disable-tcp-connections flag to the given parser.zS Default value is false. If set, workstations don't allow plain TCP connections.--disable-tcp-connectionsrFNrrrys rAddDisableTcpConnectionsrs.=) ! "e  rcpSnUR5nURSSUS9 SnURSSUS9 g)z9Adds a --enable-tcp-connections flag to the given parser.z3 If set, workstations allow plain TCP connections.z--enable-tcp-connectionsrrz9 If set, workstations don't allow plain TCP connections.rNr"r$s rAddEnableTcpConnectionsrsX7)  - - /%   =)!  rc>SnURSSU(aSOSUS9 g)z5Adds --shielded-secure-boot flag to the given parser.zL Default value is false. If set, instances will have Secure Boot enabled.z--shielded-secure-bootrFNrrrys rAddShieldedSecureBootrs.6)  "e  rc>SnURSSU(aSOSUS9 g)z0Adds a --shielded-vtpm flag to the given parser.zE Default value is false. If set, instances will have vTPM enabled.z--shielded-vtpmrFNrrrys rAddShieldedVtpmrs./)  "e  rc>SnURSSU(aSOSUS9 g)z@Adds a --shielded-integrity-monitoring flag to the given parser.zU Default value is false. If set, instances will have integrity monitoring enabled.z--shielded-integrity-monitoringrFNrrrys rAddShieldedIntegrityMonitoringrs.?) ' "e  rc2SnURS[US9 g)z5Adds a --source-workstation flag to the given parser.a Source workstation from which this workstations persistent directories are cloned on creation. When specified, the workstations service agent must have `compute.disks.createSnapshot` and `compute.snapshots.useReadOnly` permissions on the source workstation's host project. z--source-workstationr6rNrrs rAddSourceWorkstationrs')    rc>SnURSSU(aSOSUS9 g)z6Adds an --enable-audit-agent flag to the given parser.z Whether to enable Linux `auditd` logging on the workstation. When enabled, a service account must also be specified that has `logging.buckets.write` permission on the project.z--enable-audit-agentrFNrrrys rAddEnableAuditAgentrs. )  "e  rc>SnURSSU(aSOSUS9 g)zIAdds a --grant-workstation-admin-role-on-create flag to the given parser.z Default value is false. If set, creator of a workstation will get `roles/workstations.policyAdmin` role along with `roles/workstations.user` role on the workstation created by them.z(--grant-workstation-admin-role-on-createrFNrrrys r$AddGrantWorkstationAdminRoleOnCreaters. )  0 "e  rc>SnURSSU(aSOSUS9 g)z?Adds an --enable-confidential-compute flag to the given parser.zU Default value is false. If set, instances will have confidential compute enabled.z--enable-confidential-computerFNrrrys rAddEnableConfidentialComputers.?) % "e  rc>SnURSSU(aSOSUS9 g)z@Adds an --enable-nested-virtualization flag to the given parser.zV Default value is false. If set, instances will have nested virtualization enabled.z--enable-nested-virtualizationrFNrrrys rAddEnableNestedVirtualizationr#s/@) & "e  rcFSnURSU(aSOS[US9 g)z1Adds a --boot-disk-size flag to the given parser.z Size of the boot disk in GB.z--boot-disk-size2Nrvrxrys rAddBootDiskSizer0s,")bT   rc0SnURS/SQSUS9 g)z/Adds a --pd-disk-type flag to the given parser.# Type of the persistent directory.--pd-disk-type pd-standardz pd-balancedzpd-ssdrchoicesrwrNrrs r AddPdDiskTyper<s(')6  rcUR5nSnURSSUS9 SnURSUS9n[U5 [ U5 [ U5 g) zZAdds a --no-persistent-storage or group of persistent directory flags to the given parser.zU If set, workstations under this configuration will not have a persistent directory.z--no-persistent-storagerrz% Persistent directory configuration.FmutexrN)r#r add_grouprAddPdDiskSizeOrSnapshotAddPdReclaimPolicy)rtop_level_mutex_grouprpd_groups rAddNoPersistentStorageOrPdrHsi ==?Y)$$  % )) " , ,5y , I((#XrcSnUR5nURS/SQS[US9 SnURSSUS 9 g ) zGAdds a --pd-disk-size or --pd-source-snapshot flag to the given parser.) Size of the persistent directory in GB.--pd-disk-size rdiirrrwr6rz> Name of the snapshot to use as the source for the home disk.--pd-source-snapshotrwrN)r#rr8r$s rrr\s]-)  - - /%+   B) rc8Sn[R"S/SQSUS9$)NrrrrrrArgumentrs rAddPdDiskTypeArgrrs&') 6   rcTSn[R"S/SQU(aSOS[US9$)Nrrrrr)rrr8)rzrs rAddPdDiskSizeArgr}s--) + cd    rc2Sn[R"SSUS9$)NzI Name of the snapshot to use as the source for the persistent directory.rrrrrs rAddPdSourceSnapshotArgrs$M)   rcUR5n[5RU5 SnURSUS9n[ 5RU5 [ U5RU5 g)zYAdds a --pd-disk-size, --pd-disk-type, and --pd-source-snapshot flag to the given parser.z^ --pd-source-snapshot cannot be specified when --pd-disk-size or --pd-disk-type is specified.FrN)r#rrrrr)rrzpersistent_directory_grouprtype_size_groups rAddPersistentDirectoriesrsm &BBD&&'ABb).88  9/  1;++O The port on the workstation to which traffic should be sent.workstation_portrNrxrs rAddWorkstationPortFieldr6s B)(sCrc4SnURS[SUS9 g)z'Adds a --port flag to the given parser.rz--portrNrxrs r AddPortFieldr=s!B)hS"9Erc\SnURS[RRSUS9 g)z2Adds a --local-host-port flag to the given parser.aK `LOCAL_HOST:LOCAL_PORT` on which gcloud should bind and listen for connections that should be tunneled. `LOCAL_PORT` may be omitted, in which case it is treated as 0 and an arbitrary unused local port is chosen. The colon also may be omitted in that case. If `LOCAL_PORT` is 0, an arbitrary unused local port is chosen.z--local-host-portz localhost:0rN)rrHostPortParsers rAddLocalHostPortFieldr Ds7E)     % %  rc2SnURS[US9 g)z*Adds a --command flag to the given parser.zs A command to run on the workstation. Runs the command on the target workstation and then exits. z --commandrNrrs rAddCommandFieldrVs  )  k)Additional flags and positional args to be passed to *ssh(1)*.z$ The username with which to SSH. z--useruserrzD Flags and positionals passed to the underlying ssh implementation.ssh_args)nargsrz Additional flags to be passed to *ssh(1)*. It is recommended that flags be passed using an assignment operator and quotes. Example: $ {command} --ssh-flag="-vvv" --ssh-flag="-L 80:localhost:80" z --ssh-flagrHrN)rrargparse REMAINDERrs rAddSshArgsAndUserFieldr`sc) hS&yIH)j(:(:K)  l8)DrcURSS9nSnURS[USS9 SnURS[US 9 g ) zKAdds the --kms-key and --kms-key-service-account flags to the given parser.zEncryption key settingsrz} The customer-managed encryption key to use for this config. If not specified, a Google-managed encryption key is used. z --kms-keyTr6rrjzX The service account associated with the provided customer-managed encryption key. z--kms-key-service-accountrN)rrrrr%rs rAddEncryptionKeyFieldsrtsU    9  :%)[sTJ)0sKrc bSnURSS[R"[[S9US9 g)z)Adds a --labels flag to the given parser.z Labels that are applied to the configuration and propagated to the underlying Compute Engine resources. Example: $ {command} --labels=label1=value1,label2=value2z--labelsLABELSrrNrrs rAddLabelsFieldrs78)     <  rcURSS9nSnURS[US9 SnURS[USS 9 g ) zNAdds the --accelerator-type and --accelerator-count flags to the given parser.zAccelerator settingsrzd The type of accelerator resource to attach to the instance, for example, "nvidia-tesla-p100". z--accelerator-typerz= The number of accelerator cards exposed to the instance. z--accelerator-countTrN)rrrr8rs rAddAcceleratorFieldsrsZ    6  7%)))D)#Irc(SnURSS[R"[[[[[[[ [R"[[R "5[S.S9S.S/S9[R"5US 9 g ) z/Adds a --boost-config flag to the given parser.ar Boost Configuration(s) that workstations running with this configuration can boost up to. This includes id (required), machine-type, accelerator-type, accelerator-count, pool-size, boot-disk-size, and enable-nested-virtualization. Example: $ {command} --boost-config=id=boost1,machine-type=n1-standard-4,accelerator-type=nvidia-tesla-t4,accelerator-count=1z--boost-config BOOST_CONFIGkeyvalueszconsume-reservation-typer)idz machine-typezaccelerator-typezaccelerator-countz pool-sizezboot-disk-sizezenable-nested-virtualizationzreservation-affinityr$r1r4N) rrr7rr8boolrValidateConsumeReservationTyper9rs rAddBoostConfigsr's|)   !"%#& #.2&1&;&; + 3 3 58 ' $' * & & ( 3rc4SnURSS[US9 g)z(Adds a --boost flag to the given parser.zg Id of a boost configuration to start a workstations with. Example: $ {command} --boost=boost1z--boostBOOSTrNrrs rAddBoostr*s*")     rcRSnURSS[R"5US9 g)z0Adds a --replica-zones flag to the given parser.z Specifies the zones the VM and disk resources will be replicated within the region. If set, exactly two zones within the workstation cluster's region must be specified. Example: $ {command} --replica-zones=us-central1-a,us-central1-f z--replica-zones REPLICA_ZONESrNrrs rAddReplicaZonesr-s3)      rcpUR5nSnURSSUS9 SnURSSUS9 g)4Adds a --disable-ssh-to-vm flag to the given parser.z> If set, workstations disable SSH connections to the root VM.--disable-ssh-to-vmrrz= If set, workstations enable SSH connections to the root VM.--enable-ssh-to-vmNr"rs rAddDisableSSHToVMr2sX  - - /%B)   A)  rc>SnURSU(aSOSSUS9 g)z3Adds a --enable-ssh-to-vm flag to the given parser.zW Default value is False. If set, workstations enable SSH connections to the root VM.r1FNr)rwrrrrys rAddEnableSSHToVMr4s/A) "e   rc hSnURS[R"SSSSS9U(aSOSUS9 g) r/zX Default value is False. If set, workstations disable SSH connections to the root VM.r0zEThe {flag_name} option is deprecated; use --enable-ssh-to-vm instead.Fr)warnremovedrrN)rrDeprecationActionrys rAddDeprecatedDisableSSHToVMr9sLB)   & & #e  rc bSnURSS[R"[[S9US9 g)z*Adds a --vm-tags flag to the given parser.a  Resource manager tags to be bound to the instance. Tag keys and values have the same definition as https://cloud.google.com/resource-manager/docs/tags/tags-overview Example: $ {command} --vm-tags=tagKeys/key1=tagValues/value1,tagKeys/key2=tagValues/value2z --vm-tagsVM_TAGSrrNrrs r AddVmTagsr<'s8Y)     <  rc6SnURSS[SUS9 g)z@Adds a --max-usable-workstations-count flag to the given parser.z Maximum number of workstations under this configuration a user can have `workstations.workstation.use` permission on. If not specified, defaults to `0`, which indicates a user can have unlimited number of workstations under this configuration.z--max-usable-workstations-countMAX_USABLE_WORKSTATIONS_COUNTr)r5r6rwrNrxrs rAddMaxUsableWorkstationsCountr?9s-6) '-   rc SnURSS[R"[[R"5[ S.S9US9 g)z7Adds a --reservation-affinity flag to the given parser.z Reservation Affinity for the VM. This includes key, values, and consumeReservationType. Example: $ {command} --reservation-affinity=key=compute.googleapis.com/reservation-name,consumeReservationType=SPECIFIC_RESERVATION,values=my-reservation z--reservation-affinityRESERVATION_AFFINITYr!rrN)rrr7rrr&rs rAddReservationAffinityrBKsN) $  #++-*H    rc2SnURS[US9 g)z7Adds the --startup-script-uri flag to the given parser.z Link to the startup script stored in Cloud Storage. The script is executed on the workstation VM after it is booted. Example: $ {command} --startup-script-uri=gs://{bucket-name}/{object-name} z--startup-script-urirNrrs rAddStartupScriptUrirDcs%) 3YrcP/SQnX;a[R"SUSU35eU$)z-Validates the consume-reservation-type value.)ANY_RESERVATIONNO_RESERVATIONSPECIFIC_RESERVATIONzInvalid choice: 'z'. Valid choices are )rArgumentTypeError)valueallowed_valuess rr&r&rs=.    $ $ E7"77GH  ,r)FF)v1betaFF)rL)T)F)R__doc__ __future__rrrrgooglecloudsdk.callioperrr googlecloudsdk.calliope.conceptsr r (googlecloudsdk.command_lib.util.conceptsr googlecloudsdk.corer rrr&r*r,r:rPrWr]r`rprsr{r}rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr rrrrrr'r*r-r2r4r9r<r?rBrDr&r?rrrSs5&'+/(51D*& $8  4849>38@> IN8(   ;  $   *          (,  =$BD    AKDF$=E(L""$$N  && *$$0  r