)SrSSKJr SSKJr SSKJr SSKrSSKrSSKrSSKrSSK J r SSK J r SSK Jr SS KJr SS KJr SS KJr SS KJr SS KJr SSKJr SSKJr SSKrSrSr Sr!Sr"SS0r#Sr$\RJ"\RLRN\RLRP\RLRR5"SS\RT55r+g)zATriggers instance to gather logs and upload them to a GCS Bucket.)absolute_import)division)unicode_literalsN) HttpError) projects_api) base_classes)diagnose_utils)base)flags)util) time_util)log) properties diagnosticszgce-diagnostics-extract-logsdiagnostics_logs_projecta.Log collection has begun. It may take several minutes for this operation to complete. Logs will be made available shortly at: gs://{0}/{1} Status has been sent to the serial port and can be viewed by running: gcloud compute instances get-serial-port-output $VM-NAME$ --project=$PROJECT$ --zone=$ZONE$EXAMPLESz To export logs and upload them to a Cloud Storage Bucket, run: $ {command} example-instance --zone=us-central1 z To use this feature you must grant the iam.serviceAccountTokenCreator role on the project. For more information please refer to Collecting diagnostic information: [https://cloud.google.com/compute/docs/instances/collecting-diagnostic-information] cf\rSrSrSr\r\S5rSr Sr Sr SSjr Sr S rS rS rS rS rg) ExportLogsBzTriggers instance to gather logs and upload them to a Cloud Storage Bucket. Gathers logs from a running Compute Engine VM and exports them to a Google Cloud Storage Bucket. Outputs a path to the logs within the Bucket. c[RRU5 URSSSS9 URR S5 g)See base class.z--collect-process-traces store_truezCollect a 10 minute trace of the running system. On Windows, this utilizes Windows Performance Recorder. It records CPU, disk, file, and network activity during that time.)actionhelpnoneN)instance_flags INSTANCE_ARG AddArgument add_argument display_info AddFormat)clsparsers +lib/surface/compute/diagnose/export_logs.pyArgsExportLogs.ArgsMsQ++F3 "CE  !!&) cL[R"5UlURU5n[R R RRSS9nURU5nUR5nURU5nURUR5nURXEXg5nURXR 5n URR#X2[$U 5 [&R("[*R-Xg55 XgUS.$)rT)required)bucketlogPath signedUrl)r DiagnoseClient_diagnose_client_ResolveInstancerVALUEScoreprojectGet_GetDiagnosticsServiceAccount_GetSignedUrlExpiration _GetLogBucket _GetLogPathinstance_CreateResumableSignedUrl_ConstructDiagnosticsKeyEntrycollect_process_tracesUpdateMetadata_DIAGNOSTICS_METADATA_KEYrPrint _SUCCESS_MSGformat) selfargs instance_refr2service_accountexpiration_timer*log_pathurldiagnostics_entrys r$RunExportLogs.RunZs*99;D((.L$$,,00$0?G88AO224O    (F 5 56H  ( ()/ ;C:: ( (*((8:KMIIl!!&34 DDr'c[R"SRX#U55nSnURR X5n[R"U5n[R"U5n Sn [RRRRU 5n U RX4XU 5$![ a0nUR S:Xa[R"[5 eSnAff=f)aMake a resumable signed url using the SignBlob API of a Service Account. This creates a signed url that can be used by another program to upload a single file to the specified bucket with the specified file name. Args: service_account: The email of a service account that has permissions to sign a blob and create files within GCS Buckets. expiration: The time at which the returned signed url becomes invalid, measured in seconds since the epoch. bucket: The name of the bucket the signed url will point to. filepath: The name or relative path the file will have within the bucket once uploaded. Returns: A string url that can be used until its expiration to upload a file. z*POST {0} x-goog-resumable:start /{1}/{2}iNzShttps://storage.googleapis.com/{0}/{1}?GoogleAccessId={2}&Expires={3}&Signature={4})six ensure_binaryr@r.SignBlobr status_coderr>/_SERVICE_ACCOUNT_TOKEN_CREATOR_ROLE_MISSING_MSGbase64 b64encodemovesurllibparse quote_plus) rArD expirationr*filepathurl_data signed_blobe signature encoded_sigrG url_suffixs r$r9$ExportLogs._CreateResumableSignedUrlps(  9@@  *+HK ))22?Mk !!+.I""9-K BC!!''22;?J ::fZ PP  #  AB  sB99 C3+C..C3cSnURRU5HDnURRSR [ 55(dM8URnMF Uc URR U[ 5n[R"U5nSR U5n[R"XES5 [R"XES5 U$)aLocates or creates a service account with the correct permissions. Attempts to locate the service account meant for creating the signed url. If not found, it will subsequently create the service account. It will then give the service account the correct IAM permissions to create a signed url to a GCS Bucket. Args: project: The project to search for the service account in. Returns: A string email of the service account to use. Nz{}@zserviceAccount:{}zroles/storage.objectCreatorzroles/storage.objectViewer) r.ListServiceAccountsemail startswithr@_SERVICE_ACCOUNT_NAMECreateServiceAccount projects_util ParseProjectrAddIamPolicyBinding)rAr2rDaccount project_refservice_account_refs r$r4(ExportLogs._GetDiagnosticsServiceAccountsO((<>B>Ofkf      , ,Z @#    ;;  ]]c !G{;&+ A+&  s1B## C$--CC$cr[R"U5n[R"U5nUR$)z*Converts a project id to a project number.)rgrhrr3 projectNumber)rArrkr2s r$r~ExportLogs._GetProjectNumbers.,,Z8K{+G   r'c~[RR5RS5nSRX5$)zCCreates a timestamped filename that should be realistically unique.z%Y-%m-%d-%H-%M-%S-%fz{}-logs-{}.zip)rprqstrftimer@)rAr8 timestamps r$r7ExportLogs._GetLogPaths3!!%%'001GHI  " "8 77r'c[R"UR55nURnURn[ R RUU[ R"U5S9nU$)z~Resolves the arguments into an instance. Args: args: The command line arguments. Returns: An instance reference to a VM. ) scope_lister) rComputeApiHolder ReleaseTrackclient resourcesrrResolveAsResourceGetInstanceZoneScopeLister)rArBholdercompute_clientrrCs r$r/ExportLogs._ResolveInstancesj * *4+<+<+> ?F]]N  I!..@@ #>>~NAPL r'cd[R"S5nUUUS.n[R"USS9$)a-Generates a JSON String that is a command for the VM to extract the logs. Args: signed_url: The url where the logs can be uploaded. trace: Whether or not to take a 10 minute trace on the VM. Returns: A JSON String that can be written to the metadata server to trigger the extraction of logs. i,)r,traceexpireOnT) sort_keys)r CalculateExpirationjsondumps)rA signed_urlr expire_strdiagnostics_key_datas r$r:(ExportLogs._ConstructDiagnosticsKeyEntrys9..s3J ::*d ;;r')r.N)r})__name__ __module__ __qualname____firstlineno____doc__ DETAILED_HELP detailed_help classmethodr%rIr9r4r5r6r~r7r/r:__static_attributes__r'r$rrBsR  -    E,(QT!F 2 D! 8 "rsH&'  1D7B(PE5#* )64%   3/D%%++T->->-C-C%%((*S<))S<*S