CasperSecurity
o
��Jh( � @ s� d dl Z d dlZd dlZd dlZd dlmZmZmZmZ d dl m
Z
m Z m Z m
Z
mZ d dlmZ e�e�e��ZdZdZdZdZd Zd
Zd gd d
gddgddgddgd�ZG dd� de�Z dS )� N)�Any�Dict�List�Optional)�
exceptions�http�secret_manager�system�util)� PublicCloudAutoAttachInstancez�http://metadata/computeMetadata/v1/instance/service-accounts/default/identity?audience=contracts.canonical.com&format=full&licenses=TRUEzThttp://metadata.google.internal/computeMetadata/v1/instance/licenses/?recursive=truez&wait_for_change=truez&last_etag={etag}z /sys/class/dmi/id/product_namezGoogle Compute Engine�8045211386737108299�6022427724719891830�7427070211152946628�599959289349842382�7818678586103571931�2592866803419978320�160084055690847662�2176054482269786025�4168323874790319525)�xenial�bionic�focal�jammy�noblec @ s� e Zd Zdd� Zeejejg d�d�de e
e f fdd���Z ede
fdd ��Z
edefd
d ��Zdee
fd d
�Zdefdd�Zdedefdd�ZdS )�GCPAutoAttachInstancec C s
d | _ d S )N��etag��self� r �5/usr/lib/python3/dist-packages/uaclient/clouds/gcp.py�__init__% s
z GCPAutoAttachInstance.__init__)g �?� r" )� retry_sleeps�returnc C st t jtddidd�}|jdkrtj�|j� d|jiS |j� d�}|r1d|�
� v r1t j |j|d ��t j
|j|jd
��) N�Metadata-Flavor�Googler" )�headers�timeout�� �
identityToken�error_descriptionzservice account)� status_code� error_msg)�code�body)r �readurl� TOKEN_URLr. r �secrets�
add_secretr/ � json_dict�get�lowerr �GCPServiceAccountError�CloudMetadataError)r �response�
error_descr r r � identity_doc, s
�
��z"GCPAutoAttachInstance.identity_docc C s dS )N�gcpr r r r r �
cloud_type? s z GCPAutoAttachInstance.cloud_typec C s* t j�t�rt�t�}t|�� krdS dS )z$This machine is a viable GCPInstanceTF)�os�path�exists�DMI_PRODUCT_NAMEr � load_file�GCP_PRODUCT_NAME�strip)r � product_namer r r � is_viableC s
z GCPAutoAttachInstance.is_viablec C sN | j d }t�|�d�d d �}t�|�d��}|�di ��di ��dg �S ) z�Get a list of licenses from the GCP metadata.
Instance identity token (jwt) carries a list of licenses
associated with the instance itself.
Returns an empty list if licenses are not present in the metadata.
r* �.r" z===zutf-8�google�compute_engine�
license_id)r; �base64�urlsafe_b64decode�split�json�loads�decoder5 )r �token�identity�
identity_dictr r r �get_licenses_from_identityM s
�z0GCPAutoAttachInstance.get_licenses_from_identityc C s$ t �� j}|tvrt�d� dS dS )Nz0This series isn't supported for GCP auto-attach.FT)r �get_release_info�series� GCP_LICENSES�LOG�info)r rV r r r �should_poll_for_pro_license^ s
z1GCPAutoAttachInstance.should_poll_for_pro_license�wait_for_changec C s� t }|r|t7 }| jr|tj| jd�7 }tj|ddid�}|jdkrHdd� |jD �}|j �
d�| _t � � j
}t�
|g �D ] }||v rE d S q<d
S t�|j� |jd krWt�� �t�� �) Nr r% r& )r' r) c S s g | ]}|d �qS )�idr )�.0�licenser r r �
<listcomp>o s z@GCPAutoAttachInstance.is_pro_license_present.<locals>.<listcomp>r TFi� )� LICENSES_URL�WAIT_FOR_CHANGEr � LAST_ETAG�formatr r0 r. � json_listr' r5 r rU rV rW rX �errorr/ r �CancelProLicensePolling�DelayProLicensePolling)r r[ �urlr9 � license_idsrV �licr r r �is_pro_license_presente s&
�
z,GCPAutoAttachInstance.is_pro_license_presentN)�__name__�
__module__� __qualname__r! �propertyr
�retryr r8 r �strr r; r= �boolrF r rT rZ rk r r r r r $ s r ) rK rN �loggingr> �typingr r r r �uaclientr r r r r
�uaclient.cloudsr � getLogger� replace_top_level_logger_namerl rX r1 r` ra rb rA rC rW r r r r r �<module> s. ���