o d$@s,dZddlZddlZddlZddlZddlZddlmZddlm Z ddl m Z ddl m Z ddl mZeeZee jdZesIee jdZd eZd ee jd Zd Zd ZeeiZz eeddZWn eyudZYnwedfddZ edddfddZ!ddZ"dddZ#dddZ$dS)zProvides helper methods for talking to the Compute Engine metadata server. See https://cloud.google.com/compute/docs/metadata for more details. N) http_client)parse)_helpers)environment_vars) exceptionszmetadata.google.internalzhttp://{}/computeMetadata/v1/z http://{}z169.254.169.254zmetadata-flavorGoogleGCE_METADATA_TIMEOUTc Csd}||krEz|tdt|d}|jt}|jtjko|tkWSt j y@}zt d|d|||d7}WYd}~nd}~ww||ksdS)aChecks to see if the metadata server is available. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. timeout (int): How long to wait for the metadata server to respond. retry_count (int): How many times to attempt connecting to metadata server using above timeout. Returns: bool: True if the metadata server is reachable, False otherwise. rGET)urlmethodheaderstimeoutJCompute Engine Metadata server unavailable on attempt %s of %s. Reason: %sNF) _METADATA_IP_ROOT_METADATA_HEADERSr get_METADATA_FLAVOR_HEADERstatusrOK_METADATA_FLAVOR_VALUErTransportError_LOGGERwarning)requestr retry_countretriesresponsemetadata_flavorer!K/tmp/pip-target-6c632izo/lib/python/google/auth/compute_engine/_metadata.pyping?s2  r#Fc CsBt||}|dur in|}|rd|d<t||}d} | |krOz ||dtd} Wn-tjyJ} ztd| d|| | d7} WYd} ~ nd} ~ ww| |ks td || j t j krt | j} | jd d krzt| WSty} ztd | }t|| WYd} ~ dSd} ~ ww| Std || j | j| )aFetch a resource from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. path (str): The resource to retrieve. For example, ``'instance/service-accounts/default'``. root (str): The full path to the metadata server root. params (Optional[Mapping[str, str]]): A mapping of query parameter keys to values. recursive (bool): Whether to do a recursive query of metadata. See https://cloud.google.com/compute/docs/metadata#aggcontents for more details. retry_count (int): How many times to attempt connecting to metadata server using above timeout. Returns: Union[Mapping, str]: If the metadata server returns JSON, a mapping of the decoded JSON is return. Otherwise, the response content is returned as a string. Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. Ntrue recursiverr )r r r rrzqFailed to retrieve {} from the Google Compute Engine metadata service. Compute Engine Metadata server unavailablez content-typezapplication/jsonzMReceived invalid JSON from the Google Compute Engine metadata service: {:.20}z^Failed to retrieve {} from the Google Compute Engine metadata service. Status: {} Response: {})urlparseurljoinr update_queryrrrrrformatrrr from_bytesdatar jsonloads ValueErrorsix raise_from)rpathrootparamsr&rbase_url query_paramsr rrr content caught_excnew_excr!r!r"ros\      rcCs t|dS)aOGet the Google Cloud Project ID from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. Returns: str: The project ID Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. zproject/project-id)r)rr!r!r"get_project_ids r:defaultcCsd|}t||ddidS)aGet information about a service account from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. service_account (str): The string 'default' or a service account email address. The determines which service account for which to acquire information. Returns: Mapping: The service account's information, for example:: { 'email': '...', 'scopes': ['scope', ...], 'aliases': ['default', '...'] } Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. zinstance/service-accounts/{0}/r&r%r4)r*r)rservice_accountr2r!r!r"get_service_account_infos r>cCsb|rt|ts d|}d|i}nd}d|}t|||d}ttj|dd}|d|fS) aGet the OAuth 2.0 access token for a service account. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. service_account (str): The string 'default' or a service account email address. The determines which service account for which to acquire an access token. scopes (Optional[Union[str, List[str]]]): Optional string or list of strings with auth scopes. Returns: Tuple[str, datetime]: The access token and its expiration. Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. ,scopesNz#instance/service-accounts/{0}/tokenr< expires_in)seconds access_token) isinstancestrjoinr*rrutcnowdatetime timedelta)rr=r@r4r2 token_json token_expiryr!r!r"get_service_account_tokens      rL)r;)r;N)%__doc__rHr-loggingosr0 six.movesrsix.moves.urllibrr' google.authrrr getLogger__name__rgetenvGCE_METADATA_HOST_GCE_METADATA_HOSTGCE_METADATA_ROOTr*_METADATA_ROOTGCE_METADATA_IPrrrrint_METADATA_DEFAULT_TIMEOUTr/r#rr:r>rLr!r!r!r"sF         1 P