CURRENT PATH:
/
opt
/
gsutil
/
gslib
/
__pycache__
/
[ ⬅ KEMBALI ]
|
[ HOME ]
Upload File:
Upload Ke Sini
Dir Baru
File Baru
Editing:
kms_api.cpython-39.pyc
a +(Wg�4 � @ s: d Z ddlmZ ddlmZ ddlmZ ddlmZ ddlZddlZddlZddl m Z ddl m Z dd lmZ dd lmZ dd lmZ dd lmZ dd lmZ ddlmZ ddlmZ ddlmZ ddlmZ ddl m Z ddl m Z ddl m!Z! ddl m"Z" ddl m#Z# e j$Z%e �&� �r"dZ'ndZ'G dd� de(�Z)dS )z>JSON gsutil Cloud API implementation for Google Cloud Storage.� )�absolute_import)�print_function)�division)�unicode_literalsN)� exceptions)�config)�AccessDeniedException)�BadRequestException)�NotFoundException)�PreconditionException)�ServiceException)� SetUpJsonCredentialsAndCache)�NoOpCredentials)�cloudkms_v1_client)�cloudkms_v1_messages)� system_util)� GetCertsFile)�GetMaxRetryDelay)� GetNewHttp)� GetNumRetrieszVInsufficient OAuth2 scope to perform this operation. Please re-run `gcloud auth login`zRInsufficient OAuth2 scope to perform this operation. Please re-run `gsutil config`c sh e Zd ZdZd� fdd� Zdd� Zdd � Zdd d �Zd d� Zddd�Z dd� Z dd� Z ddd�Z � Z S )�KmsApiz7Wraps calls to the Cloud KMS v1 interface via apitools.Nr c s� t t| ��� || _t� | _t� | _d| _t � ddd�| _ t � ddd�}|rTd| nd| _ | j| j | j | _ t| ||d � |d k}|d k}tj| j | j||| jd �| _t� | _| j| j_t� | _| j| j_t| jt�r�| j�d d � dS )a Performs necessary setup for interacting with Google Cloud KMS. Args: logger: logging.logger for outputting log messages. credentials: Credentials to be used for interacting with Cloud KMS debug: Debug level for the API implementation (0..3). zhttps://� CredentialsZ gs_kms_hostzcloudkms.googleapis.com� gs_kms_portN�:� )� credentials� )�url�http� log_request� log_responser �key�'AIzaSyDnacJHrKma0048b13sh8cgxNUwulubmJM)�superr �__init__�loggerr � certs_filer r � http_baser �get� host_base� host_port�url_baser �apitools_clientZ CloudkmsV1r � api_clientr � num_retriesr �max_retry_wait� isinstancer �AddGlobalParam)�selfr% r �debugr r r �� __class__� � /opt/gsutil/gslib/kms_api.pyr$ : s8 �� �zKmsApi.__init__c C sT t j|d�}z| jj�|�W S tyN } z| j||d� W Y d }~n d }~0 0 d S )N)�resource��key_name)�apitools_messagesZ>CloudkmsProjectsLocationsKeyRingsCryptoKeysGetIamPolicyRequestr- �&projects_locations_keyRings_cryptoKeys� GetIamPolicy� TRANSLATABLE_APITOOLS_EXCEPTIONS�_TranslateExceptionAndRaise)r2 r: �request�er6 r6 r7 �GetKeyIamPolicye s ��zKmsApi.GetKeyIamPolicyc C sb t j|d�}t j||d�}z| jj�|�W S ty\ } z| j||d� W Y d }~n d }~0 0 d S )N)�policy)r8 ZsetIamPolicyRequestr9 )r; ZSetIamPolicyRequestZ>CloudkmsProjectsLocationsKeyRingsCryptoKeysSetIamPolicyRequestr- r< � SetIamPolicyr> r? )r2 r: rC Zpolicy_requestr@ rA r6 r6 r7 �SetKeyIamPolicyo s ��zKmsApi.SetKeyIamPolicy�globalc C s� t jd|||f d�}t j||d||f d�}z| jj�|� W n0 typ } z|jdkr\� W Y d}~n d}~0 0 d|||f S )a� Attempts to create the specified keyRing. Args: project: (str) The project id in which to create the keyRing and key. keyring_name: (str) The name of the keyRing, e.g. my-keyring. Note that this must be unique within the location. location: (str) The location in which to create the keyRing. Defaults to 'global'. Returns: (str) The fully-qualified name of the keyRing, e.g.: projects/my-project/locations/global/keyRings/my-keyring Raises: Translated CloudApi exception if we were unable to create the keyRing. Note that in the event of a 409 status code (resource already exists) when attempting creation, we continue and treat this as a success. z$projects/%s/locations/%s/keyRings/%s)�namezprojects/%s/locations/%s)ZkeyRingZ keyRingId�parent� N)r; ZKeyRingZ.CloudkmsProjectsLocationsKeyRingsCreateRequestr- Zprojects_locations_keyRings�Creater> � status_code)r2 �project� keyring_name�locationZ keyring_msgZkeyring_create_requestrA r6 r6 r7 � CreateKeyRingz s& �� �� �zKmsApi.CreateKeyRingc C sx t jt jjjd�}t j|||d�}z| jj�|� W n0 tyd } z|j dkrP� W Y d}~n d}~0 0 d|� d�|f S )a� Attempts to create the specified cryptoKey. Args: keyring_fqn: (str) The fully-qualified name of the keyRing, e.g. projects/my-project/locations/global/keyRings/my-keyring. key_name: (str) The name of the desired key, e.g. my-key. Note that this must be unique within the keyRing. Returns: (str) The fully-qualified name of the cryptoKey, e.g.: projects/my-project/locations/global/keyRings/my-keyring/cryptoKeys/my-key Raises: Translated CloudApi exception if we were unable to create the cryptoKey. Note that in the event of a 409 status code (resource already exists) when attempting creation, we continue and treat this as a success. )�purpose)Z cryptoKeyZ cryptoKeyIdrH rI Nz%s/cryptoKeys/%s�/) r; Z CryptoKeyZPurposeValueValuesEnumZENCRYPT_DECRYPTZ8CloudkmsProjectsLocationsKeyRingsCryptoKeysCreateRequestr- r< rJ r> rK �rstrip)r2 Z keyring_fqnr: Z cryptokey_msgZcryptokey_create_requestrA r6 r6 r7 �CreateCryptoKey� s ���� zKmsApi.CreateCryptoKeyc C s> | j �tj�r | j �dt�� � | j||d�}|r8|�n� dS )a' Translates an HTTP exception and raises the translated or original value. Args: e: Any Exception. key_name: Optional key name in request that caused the exception. Raises: Translated CloudApi exception, or the original exception if it was not translatable. z TranslateExceptionAndRaise: %sr9 N)r% � isEnabledFor�logging�DEBUGr3 � traceback� format_exc�_TranslateApitoolsException)r2 rA r: �translated_exceptionr6 r6 r7 r? � s ��z"KmsApi._TranslateExceptionAndRaisec C sb t |tj�r^t|dd �r^z2t�|j�}d|v rHd|d v rH|d d W S W n ty\ Y n0 d S )N�content�error�message)r0 �apitools_exceptions� HttpError�getattr�json�loadsr[ � Exception)r2 � http_error�json_objr6 r6 r7 �_GetMessageFromHttpError� s z KmsApi._GetMessageFromHttpErrorc C sX z@|j d }|�d�}|dkr>||d � �d�d }d| W S W n tyR Y n0 d S )Nzwww-authenticatezscope="r �"� zAcceptable scopes: %s)�response�find�splitrc )r2 rd �www_authenticate� scope_idx�scopesr6 r6 r7 �!_GetAcceptableScopesFromHttpError� s z(KmsApi._GetAcceptableScopesFromHttpErrorc C s� t |tj��r�| �|�}|jdkr4t|p*d|jd�S |jdkr�dt|�v r\t|pRd|jd�S dt|�v r~tt|j| � |�d�S �n |jd k�rBd t|�v r�t|p�d |jd�S d t|�v r�t|p�d |jd�S dt|�v r�td|jd�S dt|�v �r td|jd�S dt|�v �r$tt|j| � |�d�S t|�p6|j �p6||jd�S n`|jdk�rdt |�pZ|j |jd�S |jdk�r�|�r�t d| |jd�S |jdk�r�t ||jd�S t ||jd�S dS )a8 Translates apitools exceptions into their gsutil equivalents. Args: e: Any exception in TRANSLATABLE_APITOOLS_EXCEPTIONS. key_name: Optional key name in request that caused the exception. Returns: CloudStorageApiServiceException for translatable exceptions, None otherwise. i� z Bad Request)�statusi� zLogin Requiredz Access denied: login required.�insufficient_scope)rp �bodyi� z7The account for the specified project has been disabledzAccount disabled.z,Daily Limit for Unauthenticated Use Exceededz8Access denied: quota exceeded. Is your project ID valid?zUser Rate Limit Exceededz5Rate limit exceeded. Please retry this request later.zAccess Not Configuredz�Access Not Configured. Please go to the Google Cloud Platform Console (https://cloud.google.com/console#/project) for your project, select APIs & services, and enable the Google Cloud KMS API.i� rI zThe key %s already exists.i� N)r0 r^ r_ rf rK r �strr �"_INSUFFICIENT_OAUTH2_SCOPE_MESSAGEro r] r r r )r2 rA r: r] r6 r6 r7 rY � sp � � � � � ���� � z"KmsApi._TranslateApitoolsException)NNr )rF )N)N)�__name__� __module__� __qualname__�__doc__r$ rB rE rO rS r? rf ro rY � __classcell__r6 r6 r4 r7 r 7 s + # r )*rx � __future__r r r r ra rU rW �apitools.base.pyr r^ �botor �gslib.cloud_apir r r r r �gslib.gcs_json_credentialsr �gslib.no_op_credentialsr Z gslib.third_party.kms_apitoolsr r, r r; � gslib.utilsr Zgslib.utils.boto_utilr r r r r_ r> �InvokedViaCloudSdkrt �objectr r6 r6 r6 r7 �<module> s< ��
SIMPAN
[ BATAL ]