o {Zh1@sldZddlZddlmZddlZddlZddlZddlm Z ddl m Z ddl m Z ddl m Z ddl mZddl mZdd lmZeeZee jdZesWee jd Zd eZd ee jd ZdZdZeeiZz e eddZ!Wn e"ydZ!YnwdZ#dZ$ddZ%ddZ&e!dfddZ'edddddfddZ(ddZ)dd Z*d&d"d#Z+d'd$d%Z,dS)(zProvides helper methods for talking to the Compute Engine metadata server. See https://cloud.google.com/compute/docs/metadata for more details. N)urljoin)_helpers)environment_vars) exceptions)metrics) transport)ExponentialBackoffzmetadata.google.internalzhttp://{}/computeMetadata/v1/z http://{}z169.254.169.254zmetadata-flavorZGoogleZGCE_METADATA_TIMEOUTz/sys/class/dmi/id/product_namecCs t|rdStjdkr dStS)aChecks to see if the code runs on Google Compute Engine Args: request (google.auth.transport.Request): A callable used to make HTTP requests. Returns: bool: True if the code runs on Google Compute Engine, False otherwise. TntF)pingosnamedetect_gce_residency_linuxrequestr[/var/www/html/lang_env/lib/python3.10/site-packages/google/auth/compute_engine/_metadata.py is_on_gceDs   rcCsZzttd}|}Wdn1swYWn ty'YdSw|tS)zDetect Google Compute Engine residency by smbios check on Linux Returns: bool: True if the GCE product name file is detected, False otherwise. rNF)open_GCE_PRODUCT_NAME_FILEreadstrip Exception startswith_GOOGLE)Zfile_objcontentrrrrYs   rc Cst}t|tj<t|d}|D]8}z|td||d}|jt }|j t j ko,|t kWStjyJ}ztd|||WYd}~qd}~wwdS)aChecks to see if the metadata server is available. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. timeout (int): How long to wait for the metadata server to respond. retry_count (int): How many times to attempt connecting to metadata server using above timeout. Returns: bool: True if the metadata server is reachable, False otherwise. Ztotal_attemptsGET)urlmethodheaderstimeoutJCompute Engine Metadata server unavailable on attempt %s of %s. Reason: %sNF)_METADATA_HEADERScopyrZmds_pingAPI_CLIENT_HEADERr_METADATA_IP_ROOTr!get_METADATA_FLAVOR_HEADERstatus http_clientOK_METADATA_FLAVOR_VALUErTransportError_LOGGERwarning) rr" retry_countr!backoffattemptresponseZmetadata_flavorerrrr is,    r Fc Cst||}|dur in|} t} |r| ||rd| d<t|| } t|d} d} | D]I}z*|| d| d}|jtj vrWt d|||jt |j drR|j d n|j } Wq-Wn&tjyv}zt d ||||} WYd}~q-d}~wwtd | | t|j }|jtjkr|rdS|jtjkrt|jd d krzt|WSty}z td|}||d}~ww|Std| |j|j |)aFetch a resource from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. path (str): The resource to retrieve. For example, ``'instance/service-accounts/default'``. root (str): The full path to the metadata server root. params (Optional[Mapping[str, str]]): A mapping of query parameter keys to values. recursive (bool): Whether to do a recursive query of metadata. See https://cloud.google.com/compute/docs/metadata#aggcontents for more details. retry_count (int): How many times to attempt connecting to metadata server using above timeout. headers (Optional[Mapping[str, str]]): Headers for the request. return_none_for_not_found_error (Optional[bool]): If True, returns None for 404 error instead of throwing an exception. Returns: Union[Mapping, str]: If the metadata server returns JSON, a mapping of the decoded JSON is returned. Otherwise, the response content is returned as a string. Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. Ntrue recursiverr)rr r!zSCompute Engine Metadata server unavailable on attempt %s of %s. Response status: %sdecodezutf-8r#z{Failed to retrieve {} from the Google Compute Engine metadata service. Compute Engine Metadata server unavailable due to {}z content-typezapplication/jsonzMReceived invalid JSON from the Google Compute Engine metadata service: {:.20}z^Failed to retrieve {} from the Google Compute Engine metadata service. Status: {} Response: {})rr$r%updaterZ update_queryrr*rZDEFAULT_RETRYABLE_STATUS_CODESr/r0hasattrdatar9rr.format from_bytesr+ NOT_FOUNDr,Zparse_content_typer!jsonloads ValueError)rpathrootparamsr8r1r!return_none_for_not_found_errorbase_urlZ query_paramsZheaders_to_userr2Zfailure_reasonr3r4r5rZ caught_excnew_excrrrr(s &          r(cCs t|dS)aOGet the Google Cloud Project ID from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. Returns: str: The project ID Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. zproject/project-idr(rrrrget_project_ids rJcCst|ddd}|s dS|S)aGet the universe domain value from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. Returns: str: The universe domain value. If the universe domain endpoint is not not found, return the default value, which is googleapis.com Raises: google.auth.exceptions.TransportError: if an error other than 404 occurs while retrieving metadata. zuniverse/universe-domainT)rFzgoogleapis.comrI)rZuniverse_domainrrrget_universe_domain!s rKdefaultcCsd|}t||ddidS)aGet information about a service account from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. service_account (str): The string 'default' or a service account email address. The determines which service account for which to acquire information. Returns: Mapping: The service account's information, for example:: { 'email': '...', 'scopes': ['scope', ...], 'aliases': ['default', '...'] } Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. zinstance/service-accounts/{0}/r8r7)rE)r=r()rservice_accountrCrrrget_service_account_info8s rNcCsr|rt|ts d|}d|i}nd}tjti}d|}t||||d}t t j |dd}|d|fS) aGet the OAuth 2.0 access token for a service account. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. service_account (str): The string 'default' or a service account email address. The determines which service account for which to acquire an access token. scopes (Optional[Union[str, List[str]]]): Optional string or list of strings with auth scopes. Returns: Tuple[str, datetime]: The access token and its expiration. Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. ,scopesNz#instance/service-accounts/{0}/token)rEr!Z expires_in)secondsZ access_token) isinstancestrjoinrr&Ztoken_request_access_token_mdsr=r(rutcnowdatetime timedelta)rrMrPrEZmetrics_headerrCZ token_jsonZ token_expiryrrrget_service_account_tokenUs       rX)rL)rLN)-__doc__rV http.clientclientr+r@loggingr urllib.parserZ google.authrrrrrZ google.auth._exponential_backoffr getLogger__name__r/getenvZGCE_METADATA_HOSTZ_GCE_METADATA_HOSTZGCE_METADATA_ROOTr=Z_METADATA_ROOTZGCE_METADATA_IPr'r)r-r$intZ_METADATA_DEFAULT_TIMEOUTrBrrrrr r(rJrKrNrXrrrrs^            3 w