4P@iX@ dZddlZddlmZddlZddlZddlZddlm Z ddl Z ddl m Z ddl m Z ddl mZddl mZddl mZdd lmZdd lmZej*eZd Zd ZeegZej6e j8dZesej6e j<eZd Zde fdZ!de fdZ"dZ#dZ$e#e$iZ% e&ej6ddZ'dZ)dZ*dZ+dZ,d!d"dZ-e'dfdZ.dddddde'fdZ/dZ0dZ1d#dZ2d$d Z3y#e($rdZ'Y8wxYw)%zProvides helper methods for talking to the Compute Engine metadata server. See https://cloud.google.com/compute/docs/metadata for more details. N)urljoin)_helpers)environment_vars) exceptions)metrics) transport)ExponentialBackoff)_mtlsz169.254.169.254zmetadata.google.internalctj}|tjjk(r"tt vrt jdyy)aValidates the GCE metadata server environment configuration for mTLS. mTLS is only supported when connecting to the default metadata server hosts. If we are in strict mode (which requires mTLS), ensure that the metadata host has not been overridden to a custom value (which means mTLS will fail). Raises: google.auth.exceptions.MutualTLSChannelError: if the environment configuration is invalid for mTLS. zMutual TLS is required, but the metadata host has been overridden. mTLS is only supported when connecting to the default metadata host.N)r _parse_mds_mode MdsMtlsModeSTRICT_GCE_METADATA_HOST_GCE_DEFAULT_MDS_HOSTSrMutualTLSChannelError)modes n/home/www/lebenam.kofcorporation.com/venv/lib/python3.12/site-packages/google/auth/compute_engine/_metadata.py(_validate_gce_mds_configured_environmentr7sT  "D u  ''' %; ;22W  < (use_mtlsc:|rdnd}dj|tS)z%Returns the metadata server root URL.httpshttpz{}://{}/computeMetadata/v1/)formatrrschemes r_get_metadata_rootrNs!!WfF ( / /8J KKrc~|rdnd}dj|tjtjt S)z(Returns the metadata server IP root URL.rrz{}://{})rosgetenvrGCE_METADATA_IP_GCE_DEFAULT_MDS_IPrs r_get_metadata_ip_rootr#Us6 WfF    *:: ?rc tj}t||tj }t j |t j<t|}|D]`} |t|d||}|jjt}|jtjk(xr |t k(cSy#t"j$$r"} t&j)d||| Yd} ~ d} ~ wwxYw)aChecks to see if the metadata server is available. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. timeout (int): How long to wait for the metadata server to respond. retry_count (int): How many times to attempt connecting to metadata server using above timeout. Returns: bool: True if the metadata server is reachable, False otherwise. rtotal_attemptsGETurlmethodheaderstimeoutJCompute Engine Metadata server unavailable on attempt %s of %s. Reason: %sNF)r should_use_mds_mtlsrC_METADATA_HEADERScopyrmds_pingAPI_CLIENT_HEADERr r#rLget_METADATA_FLAVOR_HEADERstatus http_clientOK_METADATA_FLAVOR_VALUErTransportError_LOGGERwarning) r-rM retry_countrrLbackoffattemptresponsemetadata_flavores rr)r)s((*HWx8 $$&G)0)9)9);GG % %& >1>#'== 0 ((  OO/    s-AC  D C==Dc 4tj} t|| | t| }t t ||} |in|} t j} |r| j||rd| d<tj| | } t|}d}|D]} || d| |}|jtjvr`tj!d|||jt#|j$d r|j$j'd n |j$}n&t)j*d j-| |tj.|j$}|jt0j2k(r|ry|jt0j4k(r=tj6|j8d dk(r t;j<|S|St)j*dj-| |j|j$|#t(j*$r%}tj!d ||||}Yd}~d}~wwxYw#t>$r,}t)j*dj-|}||d}~wwxYw)akFetch a resource from the metadata server. Args: request (google.auth.transport.Request): A callable used to make HTTP requests. path (str): The resource to retrieve. For example, ``'instance/service-accounts/default'``. root (Optional[str]): The full path to the metadata server root. If not provided, the default root will be used. params (Optional[Mapping[str, str]]): A mapping of query parameter keys to values. recursive (bool): Whether to do a recursive query of metadata. See https://cloud.google.com/compute/docs/metadata#aggcontents for more details. retry_count (int): How many times to attempt connecting to metadata server using above timeout. headers (Optional[Mapping[str, str]]): Headers for the request. return_none_for_not_found_error (Optional[bool]): If True, returns None for 404 error instead of throwing an exception. timeout (int): How long to wait, in seconds for the metadata server to respond. Returns: Union[Mapping, str]: If the metadata server returns JSON, a mapping of the decoded JSON is returned. Otherwise, the response content is returned as a string. Raises: google.auth.exceptions.TransportError: if an error occurred while retrieving metadata. google.auth.exceptions.MutualTLSChannelError: if using mtls and the environment configuration is invalid for mTLS (for example, the metadata host has been overridden in strict mTLS mode). rENtrue recursiverFrHrIzSCompute Engine Metadata server unavailable on attempt %s of %s. Response status: %sdecodezutf-8rNz{Failed to retrieve {} from the Google Compute Engine metadata service. Compute Engine Metadata server unavailable due to {}z content-typezapplication/jsonzMReceived invalid JSON from the Google Compute Engine metadata service: {:.20}z^Failed to retrieve {} from the Google Compute Engine metadata service. Status: {} Response: {}) r rOrCrrrrPrQupdater update_queryr rVrDEFAULT_RETRYABLE_STATUS_CODESr[r\hasattrdatargrrZr from_bytesrW NOT_FOUNDrXparse_content_typerLjsonloads ValueError)r-pathrootparamsrfr]rLreturn_none_for_not_found_errorrMrbase_url query_paramsheaders_to_userJr^failure_reasonr_r`rbr9 caught_excnew_excs rrTrTs{Z((*HWx8 |!(+ -.tT"H2VL&++-Ng&$* [!   , 7C JJ??$x'9'9<((L n %| 33r)F)returnN)default)rN)4__doc__r http.clientclientrWrploggingr urllib.parserr= google.authrrrrr google.auth._exponential_backoffr google.auth.compute_enginer getLogger__name__r[r"_GCE_DEFAULT_HOSTrr GCE_METADATA_HOSTrGCE_METADATA_ROOTrboolrr#rUrYrPint_METADATA_DEFAULT_TIMEOUTrrr7r2r.r+rCr)rTrrrrrrrsh !   ("!?, '  H %'.+-@A RYY/AA4H"**,= .LLD,!,.DE" #IBII.Da$H I 9(* ' ?642p   $) %JZ.".<:"4_ " !"s;DD  D