U
    {ZgX0                     @   sp  d Z ddlZddlmZ ddlZddlZddlZddlm	Z	 ddl
mZ ddl
mZ ddl
mZ ddl
mZ ddl
mZ dd	lmZ eeZeejdZeseejd
ZdeZdeejdZdZdZeeiZze eddZ!W n e"k
r
   dZ!Y nX dZ#dZ$dd Z%dd Z&e!dfddZ'edddddfddZ(dd Z)dd  Z*d&d"d#Z+d'd$d%Z,dS )(zProvides helper methods for talking to the Compute Engine metadata server.

See https://cloud.google.com/compute/docs/metadata for more details.
    N)urljoin)_helpers)environment_vars)
exceptions)metrics)	transport)ExponentialBackoffzmetadata.google.internalzhttp://{}/computeMetadata/v1/z	http://{}z169.254.169.254zmetadata-flavorZGoogleZGCE_METADATA_TIMEOUT   z/sys/class/dmi/id/product_namec                 C   s    t | rdS tjdkrdS t S )a  Checks to see if the code runs on Google Compute Engine

    Args:
        request (google.auth.transport.Request): A callable used to make
            HTTP requests.

    Returns:
        bool: True if the code runs on Google Compute Engine, False otherwise.
    TntF)pingosnamedetect_gce_residency_linuxrequest r   H/tmp/pip-unpacked-wheel-1o1rfwez/google/auth/compute_engine/_metadata.py	is_on_gceD   s
    

r   c               	   C   sH   z&t td} |   }W 5 Q R X W n tk
r<   Y dS X |tS )zDetect Google Compute Engine residency by smbios check on Linux

    Returns:
        bool: True if the GCE product name file is detected, False otherwise.
    rF)open_GCE_PRODUCT_NAME_FILEreadstrip	Exception
startswith_GOOGLE)Zfile_objcontentr   r   r   r   Y   s    r   c           	      C   s   t  }t |tj< t|d}|D ]p}z6| td||d}|jt	}|j
tjkoX|tkW   S  tjk
r } ztd||| W 5 d}~X Y q$X q$dS )a  Checks to see if the metadata server is available.

    Args:
        request (google.auth.transport.Request): A callable used to make
            HTTP requests.
        timeout (int): How long to wait for the metadata server to respond.
        retry_count (int): How many times to attempt connecting to metadata
            server using above timeout.

    Returns:
        bool: True if the metadata server is reachable, False otherwise.
    Ztotal_attemptsGET)urlmethodheaderstimeoutJCompute Engine Metadata server unavailable on attempt %s of %s. Reason: %sNF)_METADATA_HEADERScopyr   Zmds_pingAPI_CLIENT_HEADERr   _METADATA_IP_ROOTr!   get_METADATA_FLAVOR_HEADERstatushttp_clientOK_METADATA_FLAVOR_VALUEr   TransportError_LOGGERwarning)	r   r"   retry_countr!   backoffattemptresponseZmetadata_flavorer   r   r   r   i   s.    
   r   F   c                 C   s  t ||}|dkri n|}	t }
|r0|
| |r<d|	d< t||	}t|d}|D ]v}z<| |d|
d}|jtj	krt
d|||j W qVnW  qW qV tjk
r } zt
d||| W 5 d}~X Y qVX qVtd	|t|j}|jtjkr|rdS |jtjkrpt|jd
 dkrlzt|W S  tk
rh } ztd|}||W 5 d}~X Y nX n|S td||j|j|dS )a  Fetch a resource from the metadata server.

    Args:
        request (google.auth.transport.Request): A callable used to make
            HTTP requests.
        path (str): The resource to retrieve. For example,
            ``'instance/service-accounts/default'``.
        root (str): The full path to the metadata server root.
        params (Optional[Mapping[str, str]]): A mapping of query parameter
            keys to values.
        recursive (bool): Whether to do a recursive query of metadata. See
            https://cloud.google.com/compute/docs/metadata#aggcontents for more
            details.
        retry_count (int): How many times to attempt connecting to metadata
            server using above timeout.
        headers (Optional[Mapping[str, str]]): Headers for the request.
        return_none_for_not_found_error (Optional[bool]): If True, returns None
            for 404 error instead of throwing an exception.

    Returns:
        Union[Mapping, str]: If the metadata server returns JSON, a mapping of
            the decoded JSON is returned. Otherwise, the response content is
            returned as a string.

    Raises:
        google.auth.exceptions.TransportError: if an error occurred while
            retrieving metadata.
    Ntrue	recursiver   r   )r   r    r!   zSCompute Engine Metadata server unavailable on attempt %s of %s. Response status: %sr#   zqFailed to retrieve {} from the Google Compute Engine metadata service. Compute Engine Metadata server unavailablezcontent-typezapplication/jsonzMReceived invalid JSON from the Google Compute Engine metadata service: {:.20}z^Failed to retrieve {} from the Google Compute Engine metadata service. Status: {} Response:
{})r   r$   r%   updater   Zupdate_queryr   r*   r   ZDEFAULT_RETRYABLE_STATUS_CODESr/   r0   r   r.   format
from_bytesdatar+   	NOT_FOUNDr,   Zparse_content_typer!   jsonloads
ValueError)r   pathrootparamsr8   r1   r!   return_none_for_not_found_errorbase_urlZquery_paramsZheaders_to_user   r2   r3   r4   r5   r   Z
caught_excnew_excr   r   r   r(      sv    &



  r(   c                 C   s
   t | dS )aO  Get the Google Cloud Project ID from the metadata server.

    Args:
        request (google.auth.transport.Request): A callable used to make
            HTTP requests.

    Returns:
        str: The project ID

    Raises:
        google.auth.exceptions.TransportError: if an error occurred while
            retrieving metadata.
    zproject/project-idr(   r   r   r   r   get_project_id  s    rH   c                 C   s   t | ddd}|sdS |S )a  Get the universe domain value from the metadata server.

    Args:
        request (google.auth.transport.Request): A callable used to make
            HTTP requests.

    Returns:
        str: The universe domain value. If the universe domain endpoint is not
        not found, return the default value, which is googleapis.com

    Raises:
        google.auth.exceptions.TransportError: if an error other than
            404 occurs while retrieving metadata.
    zuniverse/universe-domainT)rD   zgoogleapis.comrG   )r   Zuniverse_domainr   r   r   get_universe_domain  s      rI   defaultc                 C   s   d |}t| |ddidS )a  Get information about a service account from the metadata server.

    Args:
        request (google.auth.transport.Request): A callable used to make
            HTTP requests.
        service_account (str): The string 'default' or a service account email
            address. The determines which service account for which to acquire
            information.

    Returns:
        Mapping: The service account's information, for example::

            {
                'email': '...',
                'scopes': ['scope', ...],
                'aliases': ['default', '...']
            }

    Raises:
        google.auth.exceptions.TransportError: if an error occurred while
            retrieving metadata.
    zinstance/service-accounts/{0}/r8   r7   )rC   )r:   r(   )r   service_accountrA   r   r   r   get_service_account_info0  s    
rL   c                 C   sr   |r"t |tsd|}d|i}nd}tjt i}d|}t| |||d}t	 t
j|d d }|d |fS )	a  Get the OAuth 2.0 access token for a service account.

    Args:
        request (google.auth.transport.Request): A callable used to make
            HTTP requests.
        service_account (str): The string 'default' or a service account email
            address. The determines which service account for which to acquire
            an access token.
        scopes (Optional[Union[str, List[str]]]): Optional string or list of
            strings with auth scopes.
    Returns:
        Tuple[str, datetime]: The access token and its expiration.

    Raises:
        google.auth.exceptions.TransportError: if an error occurred while
            retrieving metadata.
    ,scopesNz#instance/service-accounts/{0}/token)rC   r!   Z
expires_in)secondsZaccess_token)
isinstancestrjoinr   r&   Ztoken_request_access_token_mdsr:   r(   r   utcnowdatetime	timedelta)r   rK   rN   rC   Zmetrics_headerrA   Z
token_jsonZtoken_expiryr   r   r   get_service_account_tokenM  s    


 

rV   )rJ   )rJ   N)-__doc__rT   http.clientclientr+   r>   loggingr   urllib.parser   Zgoogle.authr   r   r   r   r   Z google.auth._exponential_backoffr   	getLogger__name__r/   getenvZGCE_METADATA_HOSTZ_GCE_METADATA_HOSTZGCE_METADATA_ROOTr:   Z_METADATA_ROOTZGCE_METADATA_IPr'   r)   r-   r$   intZ_METADATA_DEFAULT_TIMEOUTr@   r   r   r   r   r   r(   rH   rI   rL   rV   r   r   r   r   <module>   s\   
 

3
o
