o

���bZ�@sbdd
lZddl
mZ
ddlmZ
ddlmZ
ddlmZ
ddl	m
Z
mZmZ
Gdd�de
e�Z
d
S)	�N)
�HTTPResponse)
�Any)
�request)
�URLError)�Plugin�IndependentPlugin�	PluginOptc@s�eZ
dZd
ZdZdZedddd�g
ZdZd	Z	d
Z
dZdd
�Zdd�Z
defdd�Zededefdd��
Zdd�Zededefdd��
ZdS)�GCPzGoogle Cloud Platform�gcp)
�virt�keep-piiFzyStop the plugin from removing PIIs like project name or organization ID from the metadata retrieved from Metadata server.)�default�descz3http://metadata.google.internal/computeMetadata/v1/zBhttp://metadata.google.internal/computeMetadata/v1/?recursive=truez[--REDACTED--]zDDMI: Google Google Compute Engine/Google Compute Engine, BIOS Googlec
Cs(|�d
�
}
|
ddkr
dS|j
|
dvS)z�
        Checks if this plugin should be executed at all. In this case, it
        will check the `dmesg` command output to see if the system is
        running on a Google Cloud Compute instance.
        �dmesg�statusr
F�output)�exec_cmd�
GOOGLE_DMI)�selfr�r�8/usr/lib/python3/dist-packages/sos/report/plugins/gcp.py�
check_enabled(s



zGCP.check_enabledc

Cs�|jd
dg
d�
z|�
�|_|��
|jtj|jdd�dddg
d�
WntyA
}

z|jt|
�
dddg
d�
WYd	}
~
nd	}
~
w
w|j	d
dg
d�
d	S)z�
        Collect the following info:
         * Metadata from the Metadata server
         * `gcloud auth list` output
         * Any google services output from journal
        zgcloud auth listr
)
�tags�)
�indentz
metadata.jsonT)�plug_dirrNzgoogle*)�unitsr)
�add_cmd_output�get_metadata�metadata�scrub_metadata�add_string_as_file�json�dumps�RuntimeError�str�add_journal)r�errrrr�setup3s	






�

���z	GCP.setup�returnc
Cs"|�|j
�
}
|
����}t�|�
S)
zq
        Retrieves metadata from the Metadata Server and transforms it into a
        dictionary object.
        )�_query_address�METADATA_QUERY�read�decoder"�loads)r�response�
response_bodyrrrrLs


zGCP.get_metadata�urlc

Csvztj
|d
di
d�}
t�|
�
}Wnty$
}
ztdt|�
�
�
d}~w
w|jdkr9td|j�d�|�����
�
|S)	zf
        Query the given url address with headers required by Google Metadata
        Server.
        zMetadata-Flavor�Google)
�headersz,Failed to communicate with Metadata Server: N��z2Failed to communicate with Metadata Server (code: z): )	r�Request�urlopenrr$r%�coder,r-)r1�reqr/r'rrrr*Us$





���



�

��zGCP._query_addressc

s���d
�
rdS�j
dd��j
dd�t��
�
dtdtf��
���fdd	����j
�
�_
���j
dd
d�
���j
dd
d�
dS)
a"

        Remove all PII information from metadata, unless a keep-pii option
        is specified.

        Note: PII information collected by this plugin, like
        project number, account names etc. might be required by Google
        Cloud Support for faster issue resolution.
        rN�project�	projectId�numericProjectId�datar)c

s�t|t
�rd
|vr�j|d
<�f
dd�|��D�
St|t�r'�f
dd�|D�
St|t�r8|��
�j����j�St|t�rF|�krD�jS|S|S)N�tokenc
si|]\}
}�|
�
�|�
�qSrr)�.0�
k�
v�
�scrubrr�
<dictcomp>}sz5GCP.scrub_metadata.<locals>.scrub.<locals>.<dictcomp>c
sg|]}
�|
�
�qSrr)r>�valuerArr�
<listcomp>sz5GCP.scrub_metadata.<locals>.scrub.<locals>.<listcomp>)�
isinstance�dict�REDACTED�items�listr%�replace�int)
r<��
project_id�project_number�project_number_intrBrrrrBws












�


z!GCP.scrub_metadata.<locals>.scrub�
attributeszssh-keys�sshKeys)�
get_optionrr%r�safe_redact_key)
rrrMrr gs
	



�
�zGCP.scrub_metadata�dict_obj�keycCs||
vr|j|
|<dSdS)
N)
rH)�clsrUrVrrrrT�s
�zGCP.safe_redact_keyN)�__name__�
__module__�__qualname__�
short_desc�plugin_name�profilesr�option_list�
METADATA_ROOTr+rHrrr(rGr�staticmethodr%rr*r �classmethodrTrrrrr	s(


��
	
'
r	)r"�http.clientr�typingr�urllibr�urllib.errorr�sos.report.pluginsrrrr	rrrr�<module>
s