o

i��d��@sbdd
lZddl
mZ
ddlmZ
ddlmZ
ddlmZ
ddl	m
Z
mZmZ
Gdd�de
e�Z
d
S)	�N)
�HTTPResponse)
�Any)
�request)
�URLError)�Plugin�IndependentPlugin�	PluginOptc@s�eZ
dZd
ZdZdZedddd�g
ZdZd	Z	d
Z
dZdd
�Zdd�Z
dd�Zdefdd�Zededefdd��
Zdd�Zededefdd��
ZdS)�GCPzGoogle Cloud Platform�gcp)
�virt�keep-piiFzyStop the plugin from removing PIIs like project name or organization ID from the metadata retrieved from Metadata server.)�default�descz3http://metadata.google.internal/computeMetadata/v1/zBhttp://metadata.google.internal/computeMetadata/v1/?recursive=truez[--REDACTED--]zDDMI: Google Google Compute Engine/Google Compute Engine, BIOS Googlec
Cs(|�d
�
}
|
ddkr
dS|j
|
dvS)z�
        Checks if this plugin should be executed at all. In this case, it
        will check the `dmesg` command output to see if the system is
        running on a Google Cloud Compute instance.
        �dmesg�statusr
F�output)�exec_cmd�
GOOGLE_DMI)�selfr�r�8/usr/lib/python3/dist-packages/sos/report/plugins/gcp.py�
check_enabled(s



zGCP.check_enabledc

Cs$|jd
dg
d�
|j
ddg
d�
dS)z�
        Collect the following info:
         * Metadata from the Metadata server
         * `gcloud auth list` output
         * Any google services output from journal
        zgcloud auth listr
�
�tagszgoogle*)�unitsrN)�add_cmd_output�add_journal�
rrrr�setup3s	z	GCP.setupc
Cs�|jd
dg
d��A}
z|�
�|_|��
|
�tj|jdd��

Wnty8
}
z
|
�t|�
�

WYd}~n
d}~w
wWd�
dSWd�
dS1sLw



Y
dS)Nz
metadata.jsonr
r�)
�indent)	�collection_file�get_metadata�metadata�scrub_metadata�write�json�dumps�RuntimeError�str)r�mfile�errrrr�collectAs






����"�zGCP.collect�returnc
Cs"|�|j
�
}
|
����}t�|�
S)
zq
        Retrieves metadata from the Metadata Server and transforms it into a
        dictionary object.
        )�_query_address�METADATA_QUERY�read�decoder&�loads)r�response�
response_bodyrrrr"Ks


zGCP.get_metadata�urlc

Csvztj
|d
di
d�}
t�|
�
}Wnty$
}
ztdt|�
�
�
d}~w
w|jdkr9td|j�d�|�����
�
|S)	zf
        Query the given url address with headers required by Google Metadata
        Server.
        zMetadata-Flavor�Google)
�headersz,Failed to communicate with Metadata Server: N��z2Failed to communicate with Metadata Server (code: z): )	r�Request�urlopenrr(r)�coder0r1)r5�reqr3r+rrrr.Ts$





���



�

��zGCP._query_addressc

s���d
�
rdS�j
dd��j
dd�t��
�
dtdtf��
���fdd	����j
�
�_
���j
dd
d�
���j
dd
d�
dS)
a"

        Remove all PII information from metadata, unless a keep-pii option
        is specified.

        Note: PII information collected by this plugin, like
        project number, account names etc. might be required by Google
        Cloud Support for faster issue resolution.
        rN�project�	projectId�numericProjectId�datar-c

s�t|t
�rd
|vr�j|d
<�f
dd�|��D�
St|t�r'�f
dd�|D�
St|t�r8|��
�j����j�St|t�rF|�krD�jS|S|S)N�tokenc
si|]\}
}�|
�
�|�
�qSrr)�.0�
k�
v�
�scrubrr�
<dictcomp>|sz5GCP.scrub_metadata.<locals>.scrub.<locals>.<dictcomp>c
sg|]}
�|
�
�qSrr)rB�valuerErr�
<listcomp>~sz5GCP.scrub_metadata.<locals>.scrub.<locals>.<listcomp>)�
isinstance�dict�REDACTED�items�listr)�replace�int)
r@��
project_id�project_number�project_number_intrFrrrrFvs












�


z!GCP.scrub_metadata.<locals>.scrub�
attributeszssh-keys�sshKeys)�
get_optionr#r)r�safe_redact_keyrrrQrr$fs
	



�
�zGCP.scrub_metadata�dict_obj�keycCs||
vr|j|
|<dSdS)
N)
rL)�clsrYrZrrrrX�s
�zGCP.safe_redact_keyN)�__name__�
__module__�__qualname__�
short_desc�plugin_name�profilesr�option_list�
METADATA_ROOTr/rLrrrr,rKr"�staticmethodr)rr.r$�classmethodrXrrrrr	s*


��

	
'
r	)r&�http.clientr�typingr�urllibr�urllib.errorr�sos.report.pluginsrrrr	rrrr�<module>
s