o @sdZddlZddlZddlZddlZddlmZddlmZ ddl m Z ddl m Z ddl m Z ded d Zd d iZedfd dZdddZdddZdS)zProvides helper methods for talking to the Compute Engine metadata server. See https://cloud.google.com/compute/docs/metadata N) http_client)parse)_helpers)client)utilzhttp://{}/computeMetadata/v1/GCE_METADATA_ROOTzmetadata.google.internalzMetadata-FlavorGooglecCslt||}t|d|}||td\}}|jtjkr-t |}|ddkr+t |S|St d||)a Fetch a resource from the metadata server. Args: path: A string indicating the resource to retrieve. For example, 'instance/service-accounts/defualt' http_request: A callable that matches the method signature of httplib2.Http.request. Used to make the request to the metadataserver. root: A string indicating the full path to the metadata server root. recursive: A boolean indicating whether to do a recursive query of metadata. See https://cloud.google.com/compute/docs/metadata#aggcontents Returns: A dictionary if the metadata server returns JSON, otherwise a string. Raises: httplib2.Httplib2Error if an error corrured while retrieving metadata. recursive)headersz content-typezapplication/jsonzTFailed to retrieve {0} from the Google Compute Enginemetadata service. Response: {1})urlparseurljoinr_add_query_parameterMETADATA_HEADERSstatusrOKr _from_bytesjsonloadshttplib2 HttpLib2Errorformat) http_requestpathrootr urlresponsecontentdecodedrG/tmp/google-cloud-sdk/lib/third_party/oauth2client/contrib/_metadata.pyget&s     r defaultcCst|d|ddS)aGet information about a service account from the metadata server. Args: service_account: An email specifying the service account for which to look up information. Default will be information for the "default" service account of the current compute engine instance. http_request: A callable that matches the method signature of httplib2.Http.request. Used to make the request to the metadata server. Returns: A dictionary with information about the specified service account, for example: { 'email': '...', 'scopes': ['scope', ...], 'aliases': ['default', '...'] } zinstance/service-accounts/{0}/T)r )r r)rservice_accountrrrget_service_account_infoNs r#cCs4t|d|}ttj|dd}|d|fS)aFetch an oauth token for the Args: service_account: An email specifying the service account this token should represent. Default will be a token for the "default" service account of the current compute engine instance. http_request: A callable that matches the method signature of httplib2.Http.request. Used to make the request to the metadataserver. Returns: A tuple of (access token, token expiration), where access token is the access token as a string and token expiration is a datetime object that indicates when the access token will expire. z#instance/service-accounts/{0}/token expires_in)seconds access_token)r rr_UTCNOWdatetime timedelta)rr" token_json token_expiryrrr get_tokenhs  r,)r!)__doc__r(rosr six.movesrsix.moves.urllibrr oauth2clientrrrrgetenv METADATA_ROOTrr r#r,rrrrs"       (