SrSSKJr SSKJr SSKJr SSKJr SSKrSSKrSSKrSSK r SSK r SSK r SSK r SSK r SSKrSSKrSSKrSSKJr SSKJr SSKrSS KJr SSKrSS KJr SS KJr SS KJr SS KJr SSK J!r! SSK J"r" SSK#J$r$ SSK%J&r& SSK'J(r( SSK'J)r) SSK*J+r+ SSK*J,r, SSK*J-r- SSK*J.r. SSK/J0r0 SSK1J2r2 SSK3J4r4 Sr5S\5-S-r6Sr7Sr8\0"5ur9r:\9(aS r;S!rrJ"S?S@\5rKSArLg)BzJImplementation of config command for creating a gsutil configuration file.)absolute_import)print_function)division)unicode_literalsN)input)ResponseNotReady)Provider)Command)!DEFAULT_TASK_ESTIMATION_THRESHOLD)MAX_COMPOSE_ARITY) CredTypesAbortException)CommandException)'CheckAndMaybePromptForAnalyticsEnabling)RegisterSignalHandler) constants) system_util)CHECK_HASH_ALWAYS)CHECK_HASH_IF_FAST_ELSE_FAIL)CHECK_HASH_IF_FAST_ELSE_SKIP)CHECK_HASH_NEVER)ShouldProhibitMultiprocessing)ServerNotFoundError) HAS_CRYPTOz/ gsutil [-D] config (-a|-e) [-n] [-o ] z SYNOPSIS a DESCRIPTION The ``gsutil config`` command generally applies to users who have legacy standalone installations of gsutil. If you installed gsutil via the Cloud SDK, ``gsutil config`` fails unless you are specifically using the ``-a`` flag or have configured gcloud to not pass its managed credentials to gsutil (via the command ``gcloud config set pass_credentials_to_gsutil false``). For all other use cases, Cloud SDK users should use the ``gcloud auth`` group of commands instead, which configures OAuth2 credentials that gcloud implicitly passes to gsutil at runtime. To check if you are using gsutil from the Cloud SDK or as a legacy standalone, use ``gsutil version -l`` and in the output look for "using cloud sdk". Important: The default behavior for the ``gsutil config`` command is to obtain user account credentials for authentication. However, user account credentials are no longer supported for standalone gsutil. For this reason, running the default ``gsutil config`` command fails, and using any of the following flags causes the command to fail: ``-b``, ``-f``, ``-r``, ``--reauth``, ``-s``, ``-w``. When using standalone gsutil, it's recommended that you use service account credentials via the ``-e`` flag. The ``gsutil config`` command obtains access credentials for Cloud Storage and writes a `boto/gsutil configuration file `_ containing the obtained credentials along with a number of other configuration- controllable values. Unless specified otherwise (see OPTIONS), the configuration file is written to ~/.boto (i.e., the file .boto under the user's home directory). If the default file already exists, an attempt is made to rename the existing file to ~/.boto.bak; if that attempt fails the command exits. A different destination file can be specified with the ``-o`` option (see OPTIONS). Because the boto configuration file contains your credentials you should keep its file permissions set so no one but you has read access. (The file is created read-only when you run ``gsutil config``.) CONFIGURING SERVICE ACCOUNT CREDENTIALS Service accounts are useful for authenticating on behalf of a service or application (as opposed to a user). If you use gsutil as a legacy stand-alone tool, you configure credentials for service accounts using the ``-e`` option: gsutil config -e Note that if you use gsutil through the Cloud SDK, you instead activate your service account via the `gcloud auth activate-service-account `_ command. When you run ``gsutil config -e``, you are prompted for the path to your private key file and, if not using a JSON key file, your service account email address and key file password. To get this data, follow the instructions on `Service Accounts `_. Using this information, gsutil populates the "gs_service_key_file" attribute in the boto configuration file. If not using a JSON key file, gsutil also populates the "gs_service_client_id" and "gs_service_key_file_password" attributes. Note that your service account is NOT considered an Owner for the purposes of API access (see "gsutil help creds" for more information about this). See https://developers.google.com/identity/protocols/OAuth2ServiceAccount for further information on service account authentication. If you want to use credentials based on access key and secret (the older authentication method before OAuth2 was supported), see the ``-a`` option in the OPTIONS section. If you wish to use gsutil with other providers (or to copy data back and forth between multiple providers) you can edit their credentials into the [Credentials] section after creating the initial boto configuration file. OPTIONS -a Prompt for Google Cloud Storage access key and secret (the older authentication method before OAuth2 was supported) instead of obtaining an OAuth2 token. -e Prompt for service account credentials. This option requires that ``-a`` is not set. -n Write the configuration file without authentication configured. This flag is mutually exclusive with all flags other than ``-o``. -o Write the configuration to instead of ~/.boto. Use ``-`` for stdout. z)https://cloud.google.com/console#/projectaY # This file contains credentials and other configuration information needed # by the boto library, used by gsutil. You can edit this file (e.g., to add # credentials) but be careful not to mis-edit any of the variable names (like # "gs_access_key_id") or remove important markers (like the "[Credentials]" and # "[Boto]" section delimiters). #  050M150M200M2G aK [Boto] # http_socket_timeout specifies the timeout (in seconds) used to tell httplib # how long to wait for socket timeouts. The default is 70 seconds. Note that # this timeout only applies to httplib, not to httplib2 (which is used for # OAuth2 refresh/access token exchanges). #http_socket_timeout = 70 # The following two options control the use of a secure transport for requests # to S3 and Google Cloud Storage. It is highly recommended to set both options # to True in production environments, especially when using OAuth2 bearer token # authentication with Google Cloud Storage. # Set 'https_validate_certificates' to False to disable server certificate # checking. The default for this option in the boto library is currently # 'False' (to avoid breaking apps that depend on invalid certificates); it is # therefore strongly recommended to always set this option explicitly to True # in configuration files, to protect against "man-in-the-middle" attacks. https_validate_certificates = True # 'debug' controls the level of debug messages printed for the XML API only: # 0 for none, 1 for basic boto debug, 2 for all boto debug plus HTTP # requests/responses. #debug = <0, 1, or 2> # 'num_retries' controls the number of retry attempts made when errors occur # during data transfers. The default is 6. # Note 1: You can cause gsutil to retry failures effectively infinitely by # setting this value to a large number (like 10000). Doing that could be useful # in cases where your network connection occasionally fails and is down for an # extended period of time, because when it comes back up gsutil will continue # retrying. However, in general we recommend not setting the value above 10, # because otherwise gsutil could appear to "hang" due to excessive retries # (since unless you run gsutil -D you won't see any logged evidence that gsutil # is retrying). # Note 2: Don't set this value to 0, as it will cause boto to fail when reusing # HTTP connections. #num_retries = # 'max_retry_delay' controls the max delay (in seconds) between retries. The # default value is 60, so the backoff sequence will be 1 seconds, 2 seconds, 4, # 8, 16, 32, and then 60 for all subsequent retries for a given HTTP request. # Note: At present this value only impacts the XML API and the JSON API uses a # fixed value of 60. #max_retry_delay = aB [GoogleCompute] # 'service_account' specifies the a Google Compute Engine service account to # use for credentials. This value is intended for use only on Google Compute # Engine virtual machines and usually lives in /etc/boto.cfg. Most users # shouldn't need to edit this part of the config. #service_account = default az0 [GSUtil] # 'resumable_threshold' specifies the smallest file size [bytes] for which # resumable Google Cloud Storage uploads are attempted. The default is 8388608 # (8 MiB). #resumable_threshold = %(resumable_threshold)d # 'rsync_buffer_lines' specifies the number of lines of bucket or directory # listings saved in each temp file during sorting. (The complete set is # split across temp files and separately sorted/merged, to avoid needing to # fit everything in memory at once.) If you are trying to synchronize very # large directories/buckets (e.g., containing millions or more objects), # having too small a value here can cause gsutil to run out of open file # handles. If that happens, you can try to increase the number of open file # handles your system allows (e.g., see 'man ulimit' on Linux; see also # http://docs.python.org/2/library/resource.html). If you can't do that (or # if you're already at the upper limit), increasing rsync_buffer_lines will # cause gsutil to use fewer file handles, but at the cost of more memory. With # rsync_buffer_lines set to 32000 and assuming a typical URL is 100 bytes # long, gsutil will require approximately 10 MiB of memory while building # the synchronization state, and will require approximately 60 open file # descriptors to build the synchronization state over all 1M source and 1M # destination URLs. Memory and file descriptors are only consumed while # building the state; once the state is built, it resides in two temp files that # are read and processed incrementally during the actual copy/delete # operations. #rsync_buffer_lines = 32000 # 'state_dir' specifies the base location where files that # need a static location are stored, such as pointers to credentials, # resumable transfer tracker files, and the last software update check. # By default these files are stored in ~/.gsutil #state_dir = # gsutil periodically checks whether a new version of the gsutil software is # available. 'software_update_check_period' specifies the number of days # between such checks. The default is 30. Setting the value to 0 disables # periodic software update checks. #software_update_check_period = 30 # 'tab_completion_timeout' controls the timeout (in seconds) for tab # completions that involve remote requests (such as bucket or object names). # If tab completion does not succeed within this timeout, no tab completion # suggestions will be returned. # A value of 0 will disable completions that involve remote requests. #tab_completion_timeout = 5 # 'parallel_process_count' and 'parallel_thread_count' specify the number # of OS processes and Python threads, respectively, to use when executing # operations in parallel. The default settings should work well as configured, # however, to enhance performance for transfers involving large numbers of # files, you may experiment with hand tuning these values to optimize # performance for your particular system configuration. #parallel_process_count = %(parallel_process_count)d #parallel_thread_count = %(parallel_thread_count)d # 'parallel_composite_upload_threshold' specifies the maximum size of a file to # upload in a single stream. Files larger than this threshold will be # partitioned into component parts and uploaded in parallel and then composed # into a single object. # The number of components will be the smaller of # ceil(file_size / parallel_composite_upload_component_size) and # MAX_COMPOSE_ARITY. The current value of MAX_COMPOSE_ARITY is # %(max_compose_arity)d. # If 'parallel_composite_upload_threshold' is set to 0, then automatic parallel # uploads will never occur. # Setting an extremely low threshold is unadvisable. The vast majority of # environments will see degraded performance for thresholds below 80M, and it # is almost never advantageous to have a threshold below 20M. # 'parallel_composite_upload_component_size' specifies the ideal size of a # component in bytes, which will act as an upper bound to the size of the # components if ceil(file_size / parallel_composite_upload_component_size) is # less than MAX_COMPOSE_ARITY. # Values can be provided either in bytes or as human-readable values # (e.g., "150M" to represent 150 mebibytes) # # Note: At present parallel composite uploads are disabled by default, because # using composite objects requires a compiled crcmod (see "gsutil help crcmod"), # and for operating systems that don't already have this package installed this # makes gsutil harder to use. Google is actively working with a number of the # Linux distributions to get crcmod included with the stock distribution. Once # that is done we will re-enable parallel composite uploads by default in # gsutil. # # Note: Parallel composite uploads should not be used with NEARLINE, COLDLINE, # or ARCHIVE storage class buckets, as doing this incurs an early deletion # charge for each component object. # # Note: Parallel composite uploads are not enabled with Cloud KMS encrypted # objects as a source or destination, as composition with KMS objects is not yet # supported. #parallel_composite_upload_threshold = %(parallel_composite_upload_threshold)s #parallel_composite_upload_component_size = %(parallel_composite_upload_component_size)s # # 'parallel_composite_upload_bypass_kms_check' removes the object/bucket KMS checks # used to guard composition of KMS objects. #disable_parallel_composite_upload_kms_check = False # 'sliced_object_download_threshold' and # 'sliced_object_download_component_size' have analogous functionality to # their respective parallel_composite_upload config values. # 'sliced_object_download_max_components' specifies the maximum number of # slices to be used when performing a sliced object download. #sliced_object_download_threshold = %(sliced_object_download_threshold)s #sliced_object_download_component_size = %(sliced_object_download_component_size)s #sliced_object_download_max_components = %(sliced_object_download_max_components)s # Compressed transport encoded uploads buffer chunks of compressed data. When # running a composite upload and/or many uploads in parallel, compression may # consume more memory than available. This setting restricts the number of # compressed transport encoded uploads running in parallel such that they # don't consume more memory than set here. This is 2GiB by default. # Values can be provided either in bytes or as human-readable values # (e.g., "2G" to represent 2 gibibytes) #max_upload_compression_buffer_size = %(max_upload_compression_buffer_size)s # GZIP compression level, if using compression. Reducing this can have # a dramatic impact on compression speed with minor size increases. # This is a value from 0-9, with 9 being max compression. # A good level to try is 6, which is the default used by the gzip tool. #gzip_compression_level = %(gzip_compression_level)s # 'task_estimation_threshold' controls how many files or objects gsutil # processes before it attempts to estimate the total work that will be # performed by the command. Estimation makes extra directory listing or API # list calls and is performed only if multiple processes and/or threads are # used. Estimation can slightly increase cost due to extra # listing calls; to disable it entirely, set this value to 0. #task_estimation_threshold=%(task_estimation_threshold)s # 'use_magicfile' specifies if the 'file --mime ' command should be # used to guess content types instead of the default filename extension-based # mechanism. Available on UNIX and macOS (and possibly on Windows, if you're # running Cygwin or some other package that provides implementations of # UNIX-like commands). When available and enabled use_magicfile should be more # robust because it analyzes file contents in addition to extensions. #use_magicfile = False # Service account emails for testing the hmac command. If these fields are not # populated with distinct service accounts the tests for the hmac command will # not be run. Primarily useful for tool developers. #test_hmac_service_account = #test_hmac_alt_service_account = #test_hmac_list_service_account = # Service account emails for testing impersonation credentials. If this field is # not populated with a service account the tests for service account # impersonation will not run. Primarily useful for tool developers. #test_impersonate_service_account = # 'content_language' specifies the ISO 639-1 language code of the content, to be # passed in the Content-Language header. By default no Content-Language is sent. # See the ISO 639-1 column of # http://www.loc.gov/standards/iso639-2/php/code_list.php for a list of # language codes. content_language = en # 'check_hashes' specifies how strictly to require integrity checking for # downloaded data. Legal values are: # '%(hash_fast_else_fail)s' - (default) Only integrity check if the digest # will run efficiently (using compiled code), else fail the download. # '%(hash_fast_else_skip)s' - Only integrity check if the server supplies a # hash and the local digest computation will run quickly, else skip the # check. # '%(hash_always)s' - Always check download integrity regardless of possible # performance costs. # '%(hash_never)s' - Don't perform download integrity checks. This setting is # not recommended except for special cases such as measuring download # performance excluding time for integrity checking. # This option exists to assist users who wish to download a GCS composite object # and are unable to install crcmod with the C-extension. CRC32c is the only # available integrity check for composite objects, and without the C-extension, # download performance can be significantly degraded by the digest computation. # This option is ignored for daisy-chain copies, which don't compute hashes but # instead (inexpensively) compare the cloud source and destination hashes. #check_hashes = if_fast_else_fail # 'encryption_key' specifies a single customer-supplied encryption key that # will be used for all data written to Google Cloud Storage. See # "gsutil help encryption" for more information # Encryption key: RFC 4648 section 4 base64-encoded AES256 string # Warning: If decrypt_key is specified without an encrypt_key, objects will be # decrypted when copied in the cloud. #encryption_key= # Each 'decryption_key' entry specifies a customer-supplied decryption key that # will be used to access and Google Cloud Storage objects encrypted with # the corresponding key. # Decryption keys: Up to 100 RFC 4648 section 4 base64-encoded AES256 strings # in ascending numerical order, starting with 1. #decryption_key1= #decryption_key2= #decryption_key3= # The ability to specify an alternative JSON API version is primarily for cloud # storage service developers. #json_api_version = v1 # Specifies the API to use when interacting with cloud storage providers. If the # gsutil command supports this API for the provider, it will be used instead of # the default API. Commands typically default to XML for S3 and JSON for GCS. # Note that if any encryption configuration options are set (see above), the # JSON API will be used for interacting with Google Cloud Storage buckets even # if XML is preferred, as gsutil does not currently support this functionality # when using the XML API. #prefer_api = json #prefer_api = xml # Disables the prompt asking for opt-in to data collection for analytics. #disable_analytics_prompt = True # The "test" command runs tests against regional buckets (unless you supply the # `-b` option). By default, the region used is us-central1, but you can change # the default region using this option. #test_cmd_regional_bucket_location = us-central1 # Tests for the "notification watchbucket" command require a notification URL. # If this option is not supplied, those tests will be skipped. #test_notification_url = https://yourdomain.url/notification-endpoint # Used in conjunction with --stet flag on cp command for end-to-end encryption. # STET binary path. If not specified, gsutil checks PATH for "stet". #stet_binary_path = # STET config path. If not specified, the STET binary will run with its default # settings. #stet_config_path = ~/.config/my_config.yaml # Adds an API call before parallel operations that triggers a reauth challenge. #trigger_reauth_challenge_for_parallel_operations = False hash_fast_else_failhash_fast_else_skip hash_always hash_neverresumable_thresholdparallel_process_countparallel_thread_count#parallel_composite_upload_threshold(parallel_composite_upload_component_size sliced_object_download_threshold%sliced_object_download_component_size%sliced_object_download_max_componentsmax_compose_aritytask_estimation_threshold"max_upload_compression_buffer_sizegzip_compression_levela0 [OAuth2] # This section specifies options used with OAuth2 authentication. # 'token_cache' specifies how the OAuth2 client should cache access tokens. # Valid values are: # 'in_memory': an in-memory cache is used. This is only useful if the boto # client instance (and with it the OAuth2 plugin instance) persists # across multiple requests. # 'file_system' : access tokens will be cached in the file system, in files # whose names include a key derived from the refresh token the access token # based on. # The default is 'file_system'. #token_cache = file_system #token_cache = in_memory # 'token_cache_path_pattern' specifies a path pattern for token cache files. # This option is only relevant if token_cache = file_system. # The value of this option should be a path, with place-holders '%(key)s' (which # will be replaced with a key derived from the refresh token the cached access # token was based on), and (optionally), %(uid)s (which will be replaced with # the UID of the current user, if available via os.getuid()). # Note that the config parser itself interpolates '%' placeholders, and hence # the above placeholders need to be escaped as '%%(key)s'. # The default value of this option is # token_cache_path_pattern = /oauth2client-tokencache.%%(uid)s.%%(key)s # where is the system-dependent default temp directory. # The following options specify the label and endpoint URIs for the OAUth2 # authorization provider being used. Primarily useful for tool developers. #provider_label = Google #provider_authorization_uri = https://accounts.google.com/o/oauth2/auth #provider_token_uri = https://oauth2.googleapis.com/token # 'oauth2_refresh_retries' controls the number of retry attempts made when # rate limiting errors occur for OAuth2 requests to retrieve an access token. # The default value is 6. #oauth2_refresh_retries = # The following options specify the OAuth2 client identity and secret that is # used when requesting and using OAuth2 tokens. If not specified, a default # OAuth2 client for the gsutil tool is used; for uses of the boto library (with # OAuth2 authentication plugin) in other client software, it is recommended to # use a tool/client-specific OAuth2 client. For more information on OAuth2, see # http://code.google.com/apis/accounts/docs/OAuth2.html c \rSrSrSr\R "S/SQ\SSSS/SSSS 9 r\R"S/S QS S \ 0S 9r Sr Sr SrSr\R"S4SjrSrSrg) ConfigCommandi;z(Implementation of gsutil config command.config)cfgconf configurerz abefhno:rs:wreauthF) command_name_aliasesusage_synopsismin_argsmax_argssupported_sub_argssupported_private_args file_url_okprovider_url_okurls_start_arg)r:r;r<awss3 command_helpz0Obtain credentials and create configuration file) help_namehelp_name_aliases help_typehelp_one_line_summary help_textsubcommand_help_textcj[R[R-[R-n[ [S5(aU[R -n[R "XS5n[R"US5$![[4an[SU<SU<35eSnAff=f)aCreates and opens a configuration file for writing. The file is created with mode 0600, and attempts to open existing files will fail (the latter is important to prevent symlink attacks). It is the caller's responsibility to close the file. Args: file_path: Path of the file to be created. Returns: A writable file object for the opened file. Raises: CommandException: if an error occurred when opening the file (including when the file already exists). O_NOINHERITizFailed to open z for writing: Nw) osO_RDWRO_CREATO_EXCLhasattrrQopenOSErrorIOErrorrfdopen)self file_pathflagsfdes (platform/gsutil/gslib/commands/config.py_OpenConfigFileConfigCommand._OpenConfigFileVs$ II "RYY .Er=!! r~~e- 779U +b 99R  W - ', ---sB B2B--B2c0[R(ag[R"U5n[ [R [R -UR-5(a|URRS5 [S5nUS;a4[R"US5 URRS5 gURRS5 gg![a%nURRS5 SnAgSnAff=f) a)Checks that the file has reasonable permissions for a private key. In particular, check that the filename provided by the user is not world- or group-readable. If either of these are true, we issue a warning and offer to fix the permissions. Args: file_path: The name of the private key file. Nz Your private key file is readable by people other than yourself. This is a security risk, since anyone with this information can use your service account. zDWould you like gsutil to change the file permissions for you? (y/N) )yYz The permissions on your file have been successfully modified. The only access allowed is readability by the user (permissions 0400 in chmod).z We were unable to modify the permissions on your file. If you would like to fix this yourself, consider running: "sudo chmod 400 " for improved security.z You have chosen to allow this file to be readable by others. If you would like to fix this yourself, consider running: "sudo chmod 400 " for improved security.)r IS_WINDOWSrSstatboolS_IRGRPS_IROTHst_modeloggerwarnrchmodinfo Exception)r\r]stfix_it_s ra_CheckPrivateKeyFilePermissions-ConfigCommand._CheckPrivateKeyFilePermissionsss   B T\\DLL (BJJ 677 kk $%34f :  H ((9e $ ++  - .  E F+8 H ++  G H H Hs2C&& D0DDcXU(d SU-nSU-nURU<SU<S35 g)a^Writes proxy name/value pair or comment line to config file. Writes proxy name/value pair if value is not None. Otherwise writes comment line. Args: config_file: File object to which the resulting config file will be written. name: The config variable name. value: The value, or None. desc: Human readable description (for comment). z#%sz<%s>z =  N)write)r\ config_filenamevaluedescs ra_WriteConfigLineMaybeCommented,ConfigCommand._WriteConfigLineMaybeCommenteds,  T\dtmeT512c [RnURS5 URUSUR SSS5S5 URUSUR SSS5S5 URUSUR SSS5S 5 URUS UR SS S5S 5 URUS UR SS S5S 5 URUSUR SSS5S5 g)zWrites proxy section of configuration file. Args: config_file: File object to which the resulting config file will be written. a?# To use a proxy, edit and uncomment the proxy and proxy_port lines. # If you need a user/password with this proxy, edit and uncomment # those lines as well. If your organization also disallows DNS # lookups by client machines, set proxy_rdns to True (the default). # If you have installed gsutil through the Cloud SDK and have # configured proxy settings in gcloud, those proxy settings will # override any other options (including those set here, along with # any settings in proxy-related environment variables). Otherwise, # if proxy_host and proxy_port are not specified in this file and # one of the OS environment variables http_proxy, https_proxy, or # HTTPS_PROXY is defined, gsutil will use the proxy server specified # in these environment variables, in order of precedence according # to how they are listed above. proxyBotoNz proxy host proxy_typez4proxy type (socks4, socks5, http) | Defaults to http proxy_portz proxy port proxy_userz proxy user proxy_passzproxy password proxy_rdnsFzLlet proxy server perform DNS lookups (True,False); socks proxy not supported)botor9rzr get_value)r\r{r9s ra_WriteProxyConfigFileSection*ConfigCommand._WriteProxyConfigFileSections[[F , - '' W(.(8(8$(O(46 ''\6#3#3FL$#O>@ ''\6#3#3FL$#O ''\6#3#3FL$#O ''\6#3#3FL$#O ''\6#3#3FL49$;VrTc SSS.nSSS.n0n0nSnU(GaGU[R:Xa[S5n [U S5n [R "U R 55 SSS5 S nU(d<[S 5n [S R[R"S 55S-5n URU 5 OU[R:Xa [S5eU[R:XadSn UHJnUS:XdM [SU-5Xn'[SU-5X~'S n Xn(a X~(aMA[S5e U (d [S5eUR!["R%55 UR!S[&R(<S[*R*R-5R/S5<S35 UR!S5 UR!S5 U(aU[R:XaUR!S5 UR!SW -5 U(dRUR!SW -5 W (d#UR!S5 UR!S5 ORUR!S U -5 O=UR!S!5 O+[0R2"5(aUR!S"5 UHnXNnX^nX;aVX;aQUR!S#U<S$U<S%35 UR!U<S&Xn<S 35 UR!U<S'X~<S 35 O*UR!S(U<S)U<S*U<S+U<S,U<S-U<S.3 5 [4R6UnUR!S/U<S0U<S1U<S235 US:XdMUR!S3U<S4U<S5U<S635 UR!S75 M UR![R8"S855 UR!S9[:-5 UR=U5 UR![>5 UR![@5 UR!S:5 S;nU[R:XaS5RC5nS?nU(d [S@5eUR!U<SAU<SB35 [E5 UR![F5 UR!SC5 g!,(df  GN=f![a [(d [S 5eGNf=f)DaCreates a boto config file interactively. Needed credentials are obtained interactively, either by asking the user for access key and secret, or by walking the user through the OAuth2 approval flow. Args: config_file: File object to which the resulting config file will be written. cred_type: There are three options: - for HMAC, ask the user for access key and secret - for OAUTH2_USER_ACCOUNT, raise an error - for OAUTH2_SERVICE_ACCOUNT, prompt the user for OAuth2 for service account email address and private key file (and if the file is a .p12 file, the password for that file). configure_auth: Boolean, whether or not to configure authentication in the generated file. rGgs)rGgooglerHFz0What is the full path to your private key file? rbNTzService account authentication via a .p12 file requires either PyOpenSSL or PyCrypto 2.6 or later. Please install either of these to proceed, use a JSON-format key file, or configure a different type of credentials.z,What is your service account email address? ryzjWhat is the password for your service key file [if you haven't set one explicitly, leave this line blank]? zThe user account authentication flow no longer works as of February 1, 2023. Tokens generated before this date will continue to work. To authenticate with your user account, install gsutil via Cloud SDK and run "gcloud auth login"rzWhat is your %s access key ID? z#What is your %s secret access key? z2Incomplete credentials provided. Please try again.z*No credentials provided. Please try again.z*# This file was created by gsutil version z at z%Y-%m-%d %H:%M:%Sz. zl# # You can create additional configuration files by running # gsutil config [options] [-o ] z[Credentials] z@# Google OAuth2 service account credentials (for "gs://" URIs): zgs_service_key_file = %s zgs_service_client_id = %s a# If you would like to set your password, you can do so # using the following commands (replaced with your # information): # "openssl pkcs12 -in cert1.p12 -out temp_cert.pem" # "openssl pkcs12 -export -in temp_cert.pem -out cert2.p12" # "rm -f temp_cert.pem" # Your initial password is "notasecret" - for more # information, please see # http://www.openssl.org/docs/apps/pkcs12.html. z!#gs_service_key_file_password = z#gs_service_key_file_password = %s z# To add Google OAuth2 credentials ("gs://" URIs), edit and uncomment the # following line: #gs_oauth2_refresh_token = zg# Google OAuth2 credentials are managed by the Cloud SDK and # do not need to be present in this file. z# z credentials ("z ://" URIs): z_access_key_id = z_secret_access_key = z# To add HMAC z credentials for "z:://" URIs, edit and uncomment the # following two lines: #z_access_key_id = #z_secret_access_key = z# The ability to specify an alternate storage host and port # is primarily for cloud storage service developers. # Setting a non-default gs_host only works if prefer_api=xml. #z*_host = #z_port = # In some cases, (e.g. VPC requests) the "host" HTTP header should # be different than the host used in the request URL. #z/_host_header = #z8_json_host = #z5_json_port = #z>_json_host_header = z# To impersonate a service account for "%s://" URIs over # JSON API, edit and uncomment the following line: #%s_impersonate_service_account = a # This configuration setting enables or disables mutual TLS # authentication. The default value for this setting is "false". When # set to "true", gsutil uses the configured client certificate as # transport credential to access the APIs. The use of mTLS ensures that # the access originates from a trusted enterprise device. When enabled, # the client certificate is auto discovered using the endpoint # verification agent. When set to "true" but no client certificate or # key is found, users receive an error. #use_client_certificate = False # The command line to execute, which prints the # certificate, private key, or password to use in # conjunction with "use_client_certificate = True". #cert_provider_command = z%s z # 'default_api_version' specifies the default Google Cloud Storage XML API # version to use. If not set below gsutil defaults to API version 1. rzdefault_api_version = %d zWhat is your project-id? z # 'default_project_id' specifies the default Google Cloud Storage project ID to # use with the 'mb' and 'ls' commands. This default can be overridden by # specifying the -p option to the 'mb' and 'ls' commands. zlNo default project ID entered. The default project ID is needed by the ls and mb commands; please try again.zdefault_project_id = z zH#client_id = #client_secret = )$r OAUTH2_SERVICE_ACCOUNTrrXjsonloadsread ValueErrorrrjointextwrapwraprvOAUTH2_USER_ACCOUNTHMACrzCONFIG_PRELUDE_CONTENTlstripgslibVERSIONdatetimenowstrftimerInvokedViaCloudSdkr HostKeyMapdedentCONFIG_BOTO_SECTION_CONTENTr$CONFIG_GOOGLECOMPUTE_SECTION_CONTENT'CONFIG_INPUTLESS_GSUTIL_SECTION_CONTENTstriprCONFIG_OAUTH2_CONFIG_CONTENT)r\r{ cred_typeconfigure_auth provider_mapuri_mapkey_idssec_keysservice_account_key_is_jsongs_service_key_file key_file_fpgs_service_client_idgs_service_key_file_password got_credsprovider key_prefix uri_schemehost_key api_versiondefault_project_idproject_id_section_preludes ra_WriteBotoConfigFile"ConfigCommand._WriteBotoConfigFilesK.!D1Ld+GGH"' i66 6#%12 >'.+ JJ{'') */(, %+!&(3"4 ).tyymmIJ0K03 03*4 & ,,-@A  55 5 GH H   & $H  ! %&G&.'/!0G !&(/19(:";H I$H,>,>$FHH% !MN N,3356 ))--/889LM OP FG )* i66 62 369LLM*   901 2.   D E   C D   E:; <  I J  ' ' ) ) : ;!)j$j  !5#Z1 2%w'8: ;%x'9; <  z:xX  O P $$X.h Xx ) * T 8 - .  L ME!P  *f::;%%k2:;=>KINN"k2[@A  ) ) + + !<=CCE$   <= =35GIJ./23BC{/. >"=> > >s) T%%T* T% T"T%% U U c [RnSnSnSnSnURH]upgUS:Xa[RnSnMUS:Xa[RnSnM9US:XaSnMCUS:XaUnMMUR 5 M_ U(aU(a [ S5eU(dU(dU(a [ S 5e[R"5(a[R"5(arU(dkU(ad[ S RS S S R[R"S SSS95S R[R"SSSS95/55e[R"5(aLU(aE[RRS R[R"S55S-5 SnU(Gd [ R"R%SS5n U (aU n O=[ R&R)[ R&RSS55n [ R&R+U 5(dU nO~U S-n[ R&R+U5(a[ SU <SU<S35e[RRSU <SU<S35 [ R,"X5 U nUS":Xa[R0n OYUR3U5n [RRS R[R"S#U-55S -5 [5[6R8[:5 UR=U UUS$9 US":waU RC5 [FRHRKS'S(5(dK[RRS S R[R"S)U-55-S -5 g*![.an [ SU <SU<S U <S!35eSn A ff=f![.an [?U [@5n U (a[RRS%5 US":wa{U RC5 [ RD"U5 U(a8[RRS&U-5 [ R,"X5 e![.an U eSn A ff=feSn A ff=f)+z+Command entry point for the config command.NFTz-az-ez-nz-ozYBoth -a and -e cannot be specified. Please see "gsutil help config" for more information.zoThe -a and -e flags cannot be specified with the -n flag. Please see "gsutil help config" for more information.ryzDOAuth2 is the preferred authentication mechanism with the Cloud SDK.z "z"): .-zThis command will create a boto config file at %s containing your credentials, based on your responses to the following questions.)rrz Caught ^C; cleaning up z'Restoring previous backed up file (%s) rrzzBoto config file "%s" created. If you need to use a proxy to access the Internet please see the instructions in that file.r)&r rsub_optsrrRaiseInvalidArgumentExceptionrrrCloudSdkCredPassingEnabledrrrsysstderrrzrSenvirongetpath expanduserexistsrenamerrstdoutrbrsignalSIGINT_CleanupHandlerr isinstancercloseunlinkrr9 has_option)r\routput_file_namehas_ahas_eroptopt_argdefault_config_path_bakboto_config_from_envdefault_config_pathr` output_file user_aborteds ra RunCommandConfigCommand.RunCommandsd--I E EN  NN  $;44  $; $;" **,&  J KK u  ; << &&((..00 TYY  H ))mmJ"&$( * + ))mm7!%$( * +(   (%%''E jjtyy --3 45 8> >?#   ZZ^^M4@ 2 gg00c71KL WW^^/ 0 0."5"> 77>>1 2 2 "57N"PQ Q C JJ  $&=? @ II) C 1 3JJk(()9:k jjtyy --Q ! "#&* *+&--9   *3/= ?03 [[ # #FG 4 4  MMP"# $!%%(, , - k C"%&=qBC C C.  >2l  56 S  "#  $ JJ  G45 6 II- @   '    ' sU!>P0P2 P/P**P/2 S9rs1Q&%'   2 " !;4&*,A4!#8CC7P(*  Y[zE4.K-L*"#$ "$#&'@'@'BB#G "#/2+380+1(06-01- .2*"#.`($i+R77$"  9::  < :* 4/ 9' 4, 9 , 6#$*%& !B'() 3+,<-S@+'D- `T GT n:r