o FhH.@sTdZddlZddlmZddlZddlZddlZddlm Z ddl m Z ddl m Z ddl m Z ddl mZeeZee jdZesKee jdZd eZd ee jd Zd Zd ZeeiZz eeddZWn eywdZYnwd Z dZ!ddZ"ddZ#edfddZ$edddddfddZ%ddZ&ddZ'd$d d!Z(d%d"d#Z)dS)&zProvides helper methods for talking to the Compute Engine metadata server. See https://cloud.google.com/compute/docs/metadata for more details. N)urljoin)_helpers)environment_vars) exceptions)metricszmetadata.google.internalzhttp://{}/computeMetadata/v1/z http://{}z169.254.169.254zmetadata-flavorGoogleGCE_METADATA_TIMEOUTz/sys/class/dmi/id/product_namecCs t|rdStjdkr dStS)aChecks to see if the code runs on Google Compute Engine Args: request (google.auth.transport.Request): A callable used to make HTTP requests. Returns: bool: True if the code runs on Google Compute Engine, False otherwise. TntF)pingosnamedetect_gce_residency_linuxrequestr]/var/www/html/loop/nvenv/lib/python3.10/site-packages/google/auth/compute_engine/_metadata.py is_on_gceBs   rcCsZzttd}|}Wdn1swYWn ty'YdSw|tS)zDetect Google Compute Engine residency by smbios check on Linux Returns: bool: True if the GCE product name file is detected, False otherwise. rNF)open_GCE_PRODUCT_NAME_FILEreadstrip Exception startswith_GOOGLE)file_objcontentrrrrWs   rc Csd}t}t|tj<||krPz|td||d}|jt}|j t j ko)|t kWSt jyK}ztd|d|||d7}WYd}~nd}~ww||ksdS)aChecks to see if the metadata server is available. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. timeout (int): How long to wait for the metadata server to respond. retry_count (int): How many times to attempt connecting to metadata server using above timeout. Returns: bool: True if the metadata server is reachable, False otherwise. rGET)urlmethodheaderstimeoutJCompute Engine Metadata server unavailable on attempt %s of %s. Reason: %sNF)_METADATA_HEADERScopyrmds_pingAPI_CLIENT_HEADER_METADATA_IP_ROOTr!get_METADATA_FLAVOR_HEADERstatus http_clientOK_METADATA_FLAVOR_VALUErTransportError_LOGGERwarning)rr" retry_countretriesr!responsemetadata_flavorerrrr gs0  r Fc Cs\t||}|dur in|} t} |r| ||rd| d<t|| } d} | |krYz || d| d} Wn-tjyT}zt d| d||| d7} WYd}~nd}~ww| |ks*td | t | j }| j tjkrq|rqdS| j tjkrt| jd d krzt|WSty}z td |}||d}~ww|Std | | j | j | )aFetch a resource from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. path (str): The resource to retrieve. For example, ``'instance/service-accounts/default'``. root (str): The full path to the metadata server root. params (Optional[Mapping[str, str]]): A mapping of query parameter keys to values. recursive (bool): Whether to do a recursive query of metadata. See https://cloud.google.com/compute/docs/metadata#aggcontents for more details. retry_count (int): How many times to attempt connecting to metadata server using above timeout. headers (Optional[Mapping[str, str]]): Headers for the request. return_none_for_not_found_error (Optional[bool]): If True, returns None for 404 error instead of throwing an exception. Returns: Union[Mapping, str]: If the metadata server returns JSON, a mapping of the decoded JSON is return. Otherwise, the response content is returned as a string. Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. Ntrue recursiverr)rr r!r#r$zqFailed to retrieve {} from the Google Compute Engine metadata service. Compute Engine Metadata server unavailablez content-typezapplication/jsonzMReceived invalid JSON from the Google Compute Engine metadata service: {:.20}z^Failed to retrieve {} from the Google Compute Engine metadata service. Status: {} Response: {})rr%r&updater update_queryrr0r1r2format from_bytesdatar,r- NOT_FOUNDr.parse_content_typer!jsonloads ValueError)rpathrootparamsr:r3r!return_none_for_not_found_errorbase_url query_paramsheaders_to_userr4r5r7r caught_excnew_excrrrr*sj &      r*cCs t|dS)aOGet the Google Cloud Project ID from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. Returns: str: The project ID Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. zproject/project-idr*rrrrget_project_ids rOcCst|ddd}|s dS|S)aGet the universe domain value from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. Returns: str: The universe domain value. If the universe domain endpoint is not not found, return the default value, which is googleapis.com Raises: google.auth.exceptions.TransportError: if an error other than 404 occurs while retrieving metadata. zuniverse/universe_domainT)rHzgoogleapis.comrN)runiverse_domainrrrget_universe_domain s rQdefaultcCsd|}t||ddidS)aGet information about a service account from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. service_account (str): The string 'default' or a service account email address. The determines which service account for which to acquire information. Returns: Mapping: The service account's information, for example:: { 'email': '...', 'scopes': ['scope', ...], 'aliases': ['default', '...'] } Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. zinstance/service-accounts/{0}/r:r9)rG)r=r*)rservice_accountrErrrget_service_account_info$s rTcCsr|rt|ts d|}d|i}nd}tjti}d|}t||||d}t t j |dd}|d|fS) aGet the OAuth 2.0 access token for a service account. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. service_account (str): The string 'default' or a service account email address. The determines which service account for which to acquire an access token. scopes (Optional[Union[str, List[str]]]): Optional string or list of strings with auth scopes. Returns: Tuple[str, datetime]: The access token and its expiration. Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. ,scopesNz#instance/service-accounts/{0}/token)rGr! expires_in)seconds access_token) isinstancestrjoinrr(token_request_access_token_mdsr=r*rutcnowdatetime timedelta)rrSrVrGmetrics_headerrE token_json token_expiryrrrget_service_account_tokenAs       rd)rR)rRN)*__doc__r_ http.clientclientr-rBloggingr urllib.parser google.authrrrr getLogger__name__r1getenvGCE_METADATA_HOST_GCE_METADATA_HOSTGCE_METADATA_ROOTr=_METADATA_ROOTGCE_METADATA_IPr)r+r/r%int_METADATA_DEFAULT_TIMEOUTrDrrrrr r*rOrQrTrdrrrrsZ          3 e