CURRENT PATH:
/
opt
/
gsutil
/
gslib
/
commands
/
__pycache__
/
[ ⬅ KEMBALI ]
|
[ HOME ]
Upload File:
Upload Ke Sini
Dir Baru
File Baru
Editing:
hmac.cpython-39.pyc
a +(Wg�B � @ s� d Z ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z ddl m Z dd l m Z dd lmZ dd lmZ dd lmZ dd lmZ ddlmZ ddlmZ ddlmZ ddlm Z dZ dZ dZ dZ dZ!dZ"dZ#dZ$dZ%dZ&e e �'d � e �'d � e �'d � e!�'d � d Z(d d �)e"e#e$e%e&g� Z*ee(e*�Z+d d gZ,d!Z-ee e"�Z.ee e#�Z/ee e$�Z0ee e%�Z1ee!e&�Z2d"d#� Z3d$d%� Z4d&e �5� d' d( d) Z6d&e �5� d* d+ d, d- d. d/ d0 d1 d2 Z7d3Z8ed4�Z9ed5d6d7e6gd8e9id9�Z:eg d:�d8e9id9�Z;ed5d6d;e7gd8e9id9�Z<ed5d6d<e8ged=�ed>�e9d?�d9�Z=ed5d6d<e7ged=�ed@�ed>�e9dA�d9�Z>ed5d6dBe7gedCdDdE��edF�e9dG�d9�Z?G dHdI� dIe�Z@dJS )Kz� Implementation of HMAC key management command for GCS. NOTE: Any modification to this file or corresponding HMAC logic should be submitted in its own PR and release to avoid concurrency issues in testing. � )�absolute_import)�division)�print_function)�unicode_literals)�Command)�CommandArgument)� ApiSelector��CommandException)�CreateHelpText)�LogCommandParams)�PopulateProjectId)�GetCloudApiInstance)�GcloudStorageFlag)�GcloudStorageMap)� InsistAscii)� shim_utilz= gsutil hmac create [-p <project>] <service_account_email> z1 gsutil hmac delete [-p <project>] <access_id> z. gsutil hmac get [-p <project>] <access_id> zJ gsutil hmac list [-a] [-l] [-p <project>] [-u <service_account_email>] zR gsutil hmac update -s (ACTIVE|INACTIVE) [-e <etag>] [-p <project>] <access_id> a <B>CREATE</B> The ``hmac create`` command creates an HMAC key for the specified service account: gsutil hmac create test.service.account@test_project.iam.gserviceaccount.com The secret key material is only available upon creation, so be sure to store the returned secret along with the access_id. <B>CREATE OPTIONS</B> The ``create`` sub-command has the following option -p <project> Specify the ID or number of the project in which to create a key. a� <B>DELETE</B> The ``hmac delete`` command permanently deletes the specified HMAC key: gsutil hmac delete GOOG56JBMFZX6PMPTQ62VD2 Note that keys must be updated to be in the ``INACTIVE`` state before they can be deleted. <B>DELETE OPTIONS</B> The ``delete`` sub-command has the following option -p <project> Specify the ID or number of the project from which to delete a key. a� <B>GET</B> The ``hmac get`` command retrieves the specified HMAC key's metadata: gsutil hmac get GOOG56JBMFZX6PMPTQ62VD2 Note that there is no option to retrieve a key's secret material after it has been created. <B>GET OPTIONS</B> The ``get`` sub-command has the following option -p <project> Specify the ID or number of the project from which to get a key. a� <B>LIST</B> The ``hmac list`` command lists the HMAC key metadata for keys in the specified project. If no project is specified in the command, the default project is used. <B>LIST OPTIONS</B> The ``list`` sub-command has the following options -a Show all keys, including recently deleted keys. -l Use long listing format. Shows each key's full metadata excluding the secret. -p <project> Specify the ID or number of the project from which to list keys. -u <service_account_email> Filter keys for a single service account. a� <B>UPDATE</B> The ``hmac update`` command sets the state of the specified key: gsutil hmac update -s INACTIVE -e M42da= GOOG56JBMFZX6PMPTQ62VD2 Valid state arguments are ``ACTIVE`` and ``INACTIVE``. To set a key to state ``DELETED``, use the ``hmac delete`` command on an ``INACTIVE`` key. If an etag is set in the command, it will only succeed if the provided etag matches the etag of the stored key. <B>UPDATE OPTIONS</B> The ``update`` sub-command has the following options -s <ACTIVE|INACTIVE> Sets the state of the specified key to either ``ACTIVE`` or ``INACTIVE``. -e <etag> If provided, the update will only be performed if the specified etag matches the etag of the stored key. -p <project> Specify the ID or number of the project in which to update a key. � z z� You can use the ``hmac`` command to interact with service account `HMAC keys <https://cloud.google.com/storage/docs/authentication/hmackeys>`_. The ``hmac`` command has five sub-commands: �INACTIVE�ACTIVEz%a, %d %b %Y %H:%M:%S GMTc C s t d| ||f �S )NzD%s %s requires an Access ID to be specified as the last argument. %sr )� command_name� subcommand�synopsis� r �"/opt/gsutil/gslib/commands/hmac.py�_AccessIdException� s ��r c C s� d dd�}d| j }||d| j�7 }||d| j�7 }||d| j�7 }||d| j�t��7 }||d | j�t��7 }||d | jd d �7 }|S )z4Format the key metadata for printing to the console.Tc S s& d}d|| d |f }|r"|d7 }|S )z=Format the metadata name-value pair into two aligned columns.� z %-*s %s�:r r )�name�value�new_line�widthZinfo_strr r r � FormatInfo� s z&_KeyMetadataOutput.<locals>.FormatInfozAccess ID %s: �StatezService Account�Projectz Time CreatedzTime Last UpdatedZEtagF)r )T) �accessId�state�serviceAccountEmail� projectId� timeCreated�strftime� _TIME_FORMAT�updated�etag)�metadatar" �messager r r �_KeyMetadataOutput� s � �r0 z--format=value[separator="z"](z-format("Access ID: {}", metadata.accessId),z"format("Secret: {}", secret))z%"](format("Access ID {}:", accessId),z,format(" State: {}", state),z:format(" Service Account: {}", serviceAccountEmail),z0format(" Project: {}", projectId),z$format(" Time Created: {}",z6 timeCreated.date(format="%a %d %b %Y %H:%M:%S GMT")),z$format(" Time Last Updated: {}",z2 updated.date(format="%a %d %b %Y %H:%M:%S GMT")),z+format(" Etag: {}", etag))zW--format=table[no-heading](format("{} ", accessId),state:width=11, serviceAccountEmail)z --project�storage�hmac�create�-p��gcloud_command�flag_map)r1 r2 �delete�describe�listz--allz--service-account)�-a�-ur4 z--long)r; �-lr< r4 �updatez --activatez --deactivate)r r z--etag)�-s�-er4 c s� e Zd ZdZejddddddejgejee � � ge � � ge � � ge � � ge � � gd�d� Z ej dg d d e eeeeed�d �Z� fd d �Zddd�Zd dd�Zd dd�Zd dd�Zd dd�Zdd� Z� ZS ) � HmacCommandz&Implementation of gsutil hmac command.r2 � � z ae:lp:s:u:T�r3 r8 �getr: r> ) �min_args�max_args�supported_sub_args� file_url_ok�urls_start_arg�gs_api_support�gs_default_api�usage_synopsis�argparse_arguments� command_helpz-CRUD operations on service account HMAC keys.)� help_name�help_name_aliases� help_type�help_one_line_summary� help_text�subcommand_help_textc sN | j d dkr*d| j v r*tdtii d�}nttttttd�i d�}t� � |�S )Nr r: r= r5 )r3 r8 r> rE r: ) �argsr �LIST_COMMAND_LONG_FORMAT�CREATE_COMMAND�DELETE_COMMAND�UPDATE_COMMAND� GET_COMMAND� LIST_COMMAND�super�get_gcloud_storage_args)�self�gcloud_storage_map�� __class__r r r^ < s ��� z#HmacCommand.get_gcloud_storage_argsNc C sx | j r| j d | _nd}t|| j| jtf ��t| |d�}|j| j| jdd�}t dd|j j f � t dd|j f � d S ) z'Creates HMAC key for a service account.r zI%s %s requires a service account to be specified as the last argument. %s�� thread_state�gs��providerz%-12s %sz Access ID:zSecret:N) rV �service_account_emailr r �action_subcommand�_CREATE_SYNOPSISr � CreateHmacKey� project_id�printr. r% �secret)r_ rd �err_msg� gsutil_api�responser r r �_CreateHmacKeyP s �� �zHmacCommand._CreateHmacKeyc C sD | j r| j d }nt| j| jt��t| |d�}|j| j|dd� dS )zDeletes an HMAC key.r rc re rf N)rV r r ri �_DELETE_SYNOPSISr � DeleteHmacKeyrl )r_ rd � access_idrp r r r �_DeleteHmacKeyd s � zHmacCommand._DeleteHmacKeyc C sP | j r| j d }nt| j| jt��t| |d�}|j| j|dd�}tt |�� dS )z!Gets HMAC key from its Access Id.r rc re rf N) rV r r ri � _GET_SYNOPSISr � GetHmacKeyrl rm r0 �r_ rd ru rp rq r r r � _GetHmacKeyp s � zHmacCommand._GetHmacKeyc C s� | j r td| j| jtf ��t| |d�}|j| j| j| j dd�}d}| j rh|D ]}t t |�� t � qNn"|D ] }t ||j |j|jf � qldS )z1Lists HMAC keys for a project or service account.z'%s %s received unexpected arguments. %src re rf z %s %-12s %sN)rV r r ri �_LIST_SYNOPSISr � ListHmacKeysrl rh �show_all� long_listrm r0 r% r& r' )r_ rd rp rq Zshort_list_format�itemr r r � _ListHmacKeys~ s* �� � �zHmacCommand._ListHmacKeysc C s� | j s td| j| jtf ��n | j tvr:tdd�t� ��| jrL| jd }nt| j| jt��t | |d�}|j | j || j | j dd�}t t|�� dS ) zUpdate an HMAC key's state.z*A state flag must be supplied for %s %s %sz&The state flag value must be one of %sz, r rc re rf N)r& r r ri �_UPDATE_SYNOPSIS�_VALID_UPDATE_STATES�joinrV r r � UpdateHmacKeyrl r- rm r0 ry r r r �_UpdateHmacKey� s. �� � � �zHmacCommand._UpdateHmacKeyc C sF | j jdd�tjkr td��| j�d�| _| jdd� t | j d� d| _ d| _ d | _ d | _d| _| j r�| j D ]p\}}|d kr�|| _ ql|d kr�t|d � || _ql|d kr�|| _ ql|dkr�d| _ ql|dkr�d| _ql|dkrl|| _ql| js�td�| _| j| j| j| j| jd�}| j|v�r(td| j| jf ��t | jgd� || j � dS )z)Command entry point for the hmac command.re rf z9The "hmac" command can only be used with the GCS JSON APIr T)� check_args)�sub_optsNFr< r4 z/Invalid non-ASCII character found in project IDr? r; r= r@ rD zCInvalid subcommand "%s" for the %s command. See "gsutil help hmac".)� subcommands)rp �GetApiSelectorr �JSONr rV �popri � ParseSubOptsr r� rh r& r} r~ r- r rl r rr rv rz r� r� r )r_ �o�aZmethod_for_argr r r � RunCommand� sT � � � zHmacCommand.RunCommand)N)N)N)N)N) �__name__� __module__� __qualname__�__doc__r �CreateCommandSpecr r� � _SYNOPSISr �%MakeZeroOrMoreCloudOrFileURLsArgument� command_spec�HelpSpec�_DETAILED_HELP_TEXT�_create_help_text�_delete_help_text�_get_help_text�_list_help_text�_update_help_text� help_specr^ rr rv rz r� r� r� � __classcell__r r ra r rA sL ���� rA N)Ar� � __future__r r r r � gslib.commandr �gslib.command_argumentr �gslib.cs_api_mapr �gslib.exceptionr �gslib.help_providerr Z gslib.metricsr �gslib.project_idr � gslib.utils.cloud_api_helperr �gslib.utils.shim_utilr r Zgslib.utils.text_utilr Z gslib.utilsr rj rs rw r{ r� Z_CREATE_DESCRIPTIONZ_DELETE_DESCRIPTION�_GET_DESCRIPTIONZ_LIST_DESCRIPTIONZ_UPDATE_DESCRIPTION�lstripr� r� � _DESCRIPTIONr� r� r+ r� r� r� r� r� r r0 �get_format_flag_newlineZ_CREATE_COMMAND_FORMATZ_DESCRIBE_COMMAND_FORMATZ_LIST_COMMAND_SHORT_FORMATZ _PROJECT_FLAGrX rY r[ r\ rW rZ rA r r r r �<module> s� ������ ���� �������� �� � ���� � �� �� ���
SIMPAN
[ BATAL ]