ó €ÏãóJ•SrSSKJr SSKJr SSKJr SSKJr SSKJr SSK J r SSK J r \R\R"\R R"\R R$\R R&5"S S \R(555rg ) z7services vpc-peerings get-vpc-service-controls command.é)Úabsolute_import)Údivision)Úunicode_literals)Úpeering)Úbase)Úutil)Ú propertiescó8•\rSrSrSrSSS.r\S5rSrSr g ) ÚGetVpcServiceControlséz=Get VPC state of Service Controls for the peering connection.a# This command provides the state of the VPC Service Controls for a connection. The state can be enabled or disabled. When enabled, Google Cloud makes the following route configuration changes in the service producer VPC network: Google Cloud removes the IPv4 default route (destination 0.0.0.0/0, next hop default internet gateway), Google Cloud then creates an IPv4 route for destination 199.36.153.4/30 using the default internet gateway next hop. When enabled, Google Cloud also creates Cloud DNS managed private zones and authorizes those zones for the service producer VPC network. The zones include googleapis.com, gcr.io, pkg.dev, notebooks.cloud.google.com, kernels.googleusercontent.com, backupdr.cloud.google.com, and backupdr.googleusercontent.com as necessary domains or host names for Google APIs and services that are compatible with VPC Service Controls. Record data in the zones resolves all host names to 199.36.153.4, 199.36.153.5, 199.36.153.6, and 199.36.153.7. When disabled, Google Cloud makes the following route configuration changes in the service producer VPC network: Google Cloud restores a default route (destination 0.0.0.0/0, next hop default internet gateway), Google Cloud also deletes the Cloud DNS managed private zones that provided the host name overrides. While enabled, the service producer VPC network can still import static and dynamic routes from the peered customer network if you enable custom route export. These custom routes can include a default route. For this reason, this command is not to be used solely as a means for preventing access to the internet. a To get the status of the VPC Service Controls for a connection peering a network called `my-network` on the current project to a service called `your-service`, run: $ {command} --network=my-network --service=your-service )Ú DESCRIPTIONÚEXAMPLEScóL•URSSSSS9 URSSSS S 9 g ) zÝArgs is called by calliope to gather arguments for this command. Args: parser: An argparse parser that can be used to add arguments that go on the command line after this command. Positional arguments are allowed. z --networkÚNETWORKTzCThe network in the current project that is peered with the service.)ÚmetavarÚrequiredÚhelpz --serviceÚSERVICEz servicenetworking.googleapis.comz,The service to get VPC service controls for.)rÚdefaultrN)Ú add_argument)Úparsers Ú=lib/surface/services/vpc_peerings/get_vpc_service_controls.pyÚArgsÚGetVpcServiceControls.ArgsLsF€ð ×ÑØØØð ð ñð ×ÑØØØ2Ø ;ð òócóæ•[RRRR SS9n[ R "U5n[R"X1RUR5$)zßRun 'services vpc-peerings get-vpc-service-controls'. Args: args: argparse.Namespace, The arguments that this command was invoked with. Returns: The state of the Vpc Service Controls, that is enabled or disabled. T)r) r ÚVALUESÚcoreÚprojectÚGetÚ projects_utilÚGetProjectNumberrr ÚserviceÚnetwork)ÚselfÚargsrÚproject_numbers rÚRunÚGetVpcServiceControls.RundsY€ô×Ñ×$Ñ$×,Ñ,×0Ñ0¸$Ð0Ð?€GÜ"×3Ò3°GÓ<€NÜ × (Ò (ØŸ ™  d§l¡ló ðr©N) Ú__name__Ú __module__Ú __qualname__Ú__firstlineno__Ú__doc__Ú detailed_helpÚ staticmethodrr(Ú__static_attributes__r*rrr r s5†ñ Fð ð@ ñC(€-ðTñóðõ.rr N)r/Ú __future__rrrÚgooglecloudsdk.api_lib.servicesrÚgooglecloudsdk.callioperÚ#googlecloudsdk.command_lib.projectsrr!Úgooglecloudsdk.corer ÚDefaultUniverseOnlyÚ ReleaseTracksÚ ReleaseTrackÚALPHAÚBETAÚGAÚDescribeCommandr r*rrÚr?s‡ðñ>å&ÝÝ'å3Ý(ÝEÝ*ð×ÑØ×ÒØ×Ñ×јT×.Ñ.×3Ñ3°T×5FÑ5F×5IÑ5IóôS˜D×0Ñ0óSóóñSr