o g1@sldZddlZddlmZddlZddlZddlZddlm Z ddl m Z ddl m Z ddl m Z ddl mZddl mZdd lmZeeZee jdZesWee jd Zd eZd ee jd ZdZdZeeiZz e eddZ!Wn e"ydZ!YnwdZ#dZ$ddZ%ddZ&e!dfddZ'edddddfddZ(ddZ)dd Z*d&d"d#Z+d'd$d%Z,dS)(zProvides helper methods for talking to the Compute Engine metadata server. See https://cloud.google.com/compute/docs/metadata for more details. N)urljoin)_helpers)environment_vars) exceptions)metrics) transport)ExponentialBackoffzmetadata.google.internalzhttp://{}/computeMetadata/v1/z http://{}z169.254.169.254zmetadata-flavorGoogleGCE_METADATA_TIMEOUTz/sys/class/dmi/id/product_namecCs t|rdStjdkr dStS)aChecks to see if the code runs on Google Compute Engine Args: request (google.auth.transport.Request): A callable used to make HTTP requests. Returns: bool: True if the code runs on Google Compute Engine, False otherwise. TntF)pingosnamedetect_gce_residency_linuxrequestr[/var/www/visachat/venv/lib/python3.10/site-packages/google/auth/compute_engine/_metadata.py is_on_gceDs   rcCsZzttd}|}Wdn1swYWn ty'YdSw|tS)zDetect Google Compute Engine residency by smbios check on Linux Returns: bool: True if the GCE product name file is detected, False otherwise. rNF)open_GCE_PRODUCT_NAME_FILEreadstrip Exception startswith_GOOGLE)file_objcontentrrrrYs   rc Cst}t|tj<t|d}|D]8}z|td||d}|jt }|j t j ko,|t kWStjyJ}ztd|||WYd}~qd}~wwdS)aChecks to see if the metadata server is available. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. timeout (int): How long to wait for the metadata server to respond. retry_count (int): How many times to attempt connecting to metadata server using above timeout. Returns: bool: True if the metadata server is reachable, False otherwise. total_attemptsGET)urlmethodheaderstimeoutJCompute Engine Metadata server unavailable on attempt %s of %s. Reason: %sNF)_METADATA_HEADERScopyrmds_pingAPI_CLIENT_HEADERr_METADATA_IP_ROOTr%get_METADATA_FLAVOR_HEADERstatus http_clientOK_METADATA_FLAVOR_VALUErTransportError_LOGGERwarning) rr& retry_countr%backoffattemptresponsemetadata_flavorerrrr is,    r Fc Cst||}|dur in|} t} |r| ||rd| d<t|| } t|d} d} | D]I}z*|| d| d}|jtj vrWt d|||jt |j drR|j d n|j } Wq-Wn&tjyv}zt d ||||} WYd}~q-d}~wwtd | | t|j }|jtjkr|rdS|jtjkrt|jd d krzt|WSty}z td|}||d}~ww|Std| |j|j |)aFetch a resource from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. path (str): The resource to retrieve. For example, ``'instance/service-accounts/default'``. root (str): The full path to the metadata server root. params (Optional[Mapping[str, str]]): A mapping of query parameter keys to values. recursive (bool): Whether to do a recursive query of metadata. See https://cloud.google.com/compute/docs/metadata#aggcontents for more details. retry_count (int): How many times to attempt connecting to metadata server using above timeout. headers (Optional[Mapping[str, str]]): Headers for the request. return_none_for_not_found_error (Optional[bool]): If True, returns None for 404 error instead of throwing an exception. Returns: Union[Mapping, str]: If the metadata server returns JSON, a mapping of the decoded JSON is returned. Otherwise, the response content is returned as a string. Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. Ntrue recursiver r")r#r$r%zSCompute Engine Metadata server unavailable on attempt %s of %s. Response status: %sdecodezutf-8r'z{Failed to retrieve {} from the Google Compute Engine metadata service. Compute Engine Metadata server unavailable due to {}z content-typezapplication/jsonzMReceived invalid JSON from the Google Compute Engine metadata service: {:.20}z^Failed to retrieve {} from the Google Compute Engine metadata service. Status: {} Response: {})rr(r)updater update_queryrr/rDEFAULT_RETRYABLE_STATUS_CODESr4r5hasattrdatar?rr3format from_bytesr0 NOT_FOUNDr1parse_content_typer%jsonloads ValueError)rpathrootparamsr>r6r%return_none_for_not_found_errorbase_url query_paramsheaders_to_user#r7failure_reasonr8r9r;r caught_excnew_excrrrr-s &          r-cCs t|dS)aOGet the Google Cloud Project ID from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. Returns: str: The project ID Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. zproject/project-idr-rrrrget_project_ids rWcCst|ddd}|s dS|S)aGet the universe domain value from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. Returns: str: The universe domain value. If the universe domain endpoint is not not found, return the default value, which is googleapis.com Raises: google.auth.exceptions.TransportError: if an error other than 404 occurs while retrieving metadata. zuniverse/universe-domainT)rOzgoogleapis.comrV)runiverse_domainrrrget_universe_domain!s rYdefaultcCsd|}t||ddidS)aGet information about a service account from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. service_account (str): The string 'default' or a service account email address. The determines which service account for which to acquire information. Returns: Mapping: The service account's information, for example:: { 'email': '...', 'scopes': ['scope', ...], 'aliases': ['default', '...'] } Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. zinstance/service-accounts/{0}/r>r=)rN)rEr-)rservice_accountrLrrrget_service_account_info8s r\cCsr|rt|ts d|}d|i}nd}tjti}d|}t||||d}t t j |dd}|d|fS) aGet the OAuth 2.0 access token for a service account. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. service_account (str): The string 'default' or a service account email address. The determines which service account for which to acquire an access token. scopes (Optional[Union[str, List[str]]]): Optional string or list of strings with auth scopes. Returns: Tuple[str, datetime]: The access token and its expiration. Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. ,scopesNz#instance/service-accounts/{0}/token)rNr% expires_in)seconds access_token) isinstancestrjoinrr+token_request_access_token_mdsrEr-rutcnowdatetime timedelta)rr[r^rNmetrics_headerrL token_json token_expiryrrrget_service_account_tokenUs       rl)rZ)rZN)-__doc__rg http.clientclientr0rIloggingr urllib.parser google.authrrrrr google.auth._exponential_backoffr getLogger__name__r4getenvGCE_METADATA_HOST_GCE_METADATA_HOSTGCE_METADATA_ROOTrE_METADATA_ROOTGCE_METADATA_IPr,r.r2r(int_METADATA_DEFAULT_TIMEOUTrKrrrrr r-rWrYr\rlrrrrs^            3 w