관리-도구
편집 파일: gcp.cpython-39.pyc
a -�_g� � @ sb d dl Z d dlmZ d dlmZ d dlmZ d dlmZ d dl m Z m Z m Z G dd� de e �Z dS ) � N)� HTTPResponse)�Any)�request)�URLError)�Plugin�IndependentPlugin� PluginOptc @ s� e Zd ZdZdZdZedddd�gZdZd Z d Z d Z d Z d d� Z dd� Zdd� Zed�dd�Zeeed�dd��Zdd� Zeeed�d d ��Zd S ) �GCPzGoogle Cloud Platform�gcp)Zvirt�keep-piiFzyStop the plugin from removing PIIs like project name or organization ID from the metadata retrieved from Metadata server.)�defaultZdescz3http://metadata.google.internal/computeMetadata/v1/zBhttp://metadata.google.internal/computeMetadata/v1/?recursive=truez[--REDACTED--]NzDDMI: Google Google Compute Engine/Google Compute Engine, BIOS Googlec C s( | � d�}|d dkrdS | j|d v S )z� Checks if this plugin should be executed at all. In this case, it will check the `dmesg` command output to see if the system is running on a Google Cloud Compute instance. �dmesg�statusr F�output)Zexec_cmd� GOOGLE_DMI)�selfr � r �:/usr/lib/python3.9/site-packages/sos/report/plugins/gcp.py� check_enabled) s zGCP.check_enabledc C s$ | j ddgd� | jddgd� dS )z� Collect the following info: * Metadata from the Metadata server * `gcloud auth list` output * Any google services output from journal zgcloud auth listr ��tagszgoogle*)Zunitsr N)Zadd_cmd_outputZ add_journal�r r r r �setup4 s z GCP.setupc C s� | j ddgd��p}z,| �� | _| �� |�tj| jdd�� W n2 typ } z|�t|�� W Y d }~n d }~0 0 W d � n1 s�0 Y d S )Nz metadata.jsonr r � )�indent) Zcollection_file� get_metadata�metadata�scrub_metadata�write�json�dumps� RuntimeError�str)r Zmfile�errr r r �collectB s z GCP.collect)�returnc C s" | � | j�}|�� �� }t�|�S )zq Retrieves metadata from the Metadata Server and transforms it into a dictionary object. )�_query_address�METADATA_QUERY�read�decoder �loads)r �responseZ response_bodyr r r r L s zGCP.get_metadata)�urlr% c C s� znt j| ddid�}t �|��>}|jdkrHtd|j� d�|�� �� ��|W d � W S 1 sb0 Y W n6 ty� } z tdt|� �|�W Y d}~n d}~0 0 dS ) zf Query the given url address with headers required by Google Metadata Server. zMetadata-FlavorZGoogle)Zheaders�� z2Failed to communicate with Metadata Server (code: z): Nz,Failed to communicate with Metadata Server: ) r ZRequestZurlopen�coder! r( r) r r" )r, Zreqr+ r# r r r r& U s$ � ��( ��zGCP._query_addressc s� �� d�rdS �jd d � �jd d �t���ttd�� ����fdd� ���j��_���jd d d � ���jd d d � dS ) a" Remove all PII information from metadata, unless a keep-pii option is specified. Note: PII information collected by this plugin, like project number, account names etc. might be required by Google Cloud Support for faster issue resolution. r NZprojectZ projectIdZnumericProjectId)�datar% c s� t | t�r2d| v r �j| d< �fdd�| �� D �S t | t�rN�fdd�| D �S t | t�rp| ���j��� �j�S t | t�r�| �kr��jS | S | S )N�tokenc s i | ]\}}� |�� |��qS r r )�.0�k�v��scrubr r � <dictcomp> � z5GCP.scrub_metadata.<locals>.scrub.<locals>.<dictcomp>c s g | ] }� |��qS r r )r1 �valuer4 r r � <listcomp>� r7 z5GCP.scrub_metadata.<locals>.scrub.<locals>.<listcomp>)� isinstance�dict�REDACTED�items�listr" �replace�int)r/ �Z project_idZproject_numberZproject_number_intr5 r r r r5 y s � z!GCP.scrub_metadata.<locals>.scrubZ attributeszssh-keysZsshKeys)Z get_optionr r" r �safe_redact_keyr r rA r r i s ��zGCP.scrub_metadata)�dict_obj�keyc C s ||v r| j ||< dS )z Redact keys N)r< )�clsrC rD r r r rB � s zGCP.safe_redact_key)�__name__� __module__� __qualname__Z short_descZ plugin_nameZprofilesr Z option_listZ METADATA_ROOTr' r< r r r r r$ r; r � staticmethodr" r r& r � classmethodrB r r r r r s* �� 'r )r Z http.clientr �typingr Zurllibr Z urllib.errorr Zsos.report.pluginsr r r r r r r r �<module> s