U M[^80@sddlmZddlZddlZddlmZddlmZddlmZddlmZddlmZzddl m Z m Z m Z m Z Wnek rYnXd Zd Zd Zd Zd ZdZGdddejZGdddejZdddZdddddZddddZdS) )datetimeN)clouds) exceptions)status) serviceclient)util)AnyDictListOptionalz invalid tokenz/v1/context/machines/tokenz3/v1/contracts/{contract}/context/machines/{machine}z /v1/resourcesz3/v1/resources/{resource}/context/machines/{machine}z/v1/clouds/{cloud_type}/tokencs:eZdZfddZddZd ddZfdd ZZS) ContractAPIErrorcsZt||j|j|jd|kr,|d|_n|g|_|jD]}|d|d|d<q:dS)NZ error_listtitlecode)super__init__rheadersurl api_errorsget)selfeZerror_responseerror __class__3/usr/lib/python3/dist-packages/uaclient/contract.pyrs   zContractAPIError.__init__cCs<|jD]0}||dkrdS|dd|rdSqdS)NrTmessageF)rr startswith)r error_coderrrr __contains__'s  zContractAPIError.__contains__NcCs(|jD]}|d|kr|dSq|S)Nrdetail)r)rrdefaultrrrr__get__/s  zContractAPIError.__get__c st}g}|jD]\}|ds>||d|ddq|dD]$}t|trd||qJ||qJq|d|j dd |S)Nextrar!rrz: []z, ) r__str__rrappendvalues isinstancelistextendrjoin)rprefixZdetailserrr$rrrr&5s     zContractAPIError.__str__)N)__name__ __module__ __qualname__rr r#r& __classcell__rrrrr s  r c@seZdZdZeZdddZddddZej d d d Z de e e d d ddZ de e e d d ddZ de e e ed dddZddZdS)UAContractClientZ contract_urlNcCsL|}|dd|i||}|jt||d\}}|jd||S)aRequests machine attach to the provided contact_id. @param contract_id: Unique contract id provided by contract service. @param contract_token: Token string providing authentication to ContractBearer service endpoint. @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. @return: Dict of the JSON response containing the machine-token. Authorization Bearer {})datar machine-token)rupdateformat_get_platform_data request_urlAPI_V1_CONTEXT_MACHINE_TOKENcfg write_cache)rcontract_token machine_idrr6 machine_token_headersrrrrequest_contract_machine_attachIs   z0UAContractClient.request_contract_machine_attachzDict[str, Any]returncCsBt}|d|d|dd}|tdtj|\}}|S)z=Requests list of entitlements available to this machine type.archserieskernel) architecturerGrH?)rget_platform_infor;API_V1_RESOURCESurllibparseZ urlencode)rplatformZ query_paramsZresource_responserrrrrequest_resources]sz"UAContractClient.request_resources)instancecCs0|jtj|jd|jd\}}|jd||S)zRequests contract token for auto-attach images for Pro clouds. @param instance: AutoAttachCloudInstance for the cloud. @return: Dict of the JSON response containing the contract-token. ) cloud_type)r6zcontract-token)r;API_V1_AUTO_ATTACH_CLOUD_TOKENr9rRZ identity_docr=r>)rrQresponserBrrr"request_auto_attach_contract_tokenjs  z3UAContractClient.request_auto_attach_contract_tokenr )rA contract_idr@rEcCs|j|||ddS)z6Update existing machine-token for an attached machine.FrArVr@detach_request_machine_token_updaterrArVr@rrrrequest_machine_token_update|s z-UAContractClient.request_machine_token_updatecCs|j|||ddS)zAReport the attached machine should be detached from the contract.TrWrYr[rrrdetach_machine_from_contracts z-UAContractClient.detach_machine_from_contractF)rArVr@rXrEc Cs|}|dd|i||}tj||dd}d|i}|rNd|d<nd|d<||d <|j|f|\} }|d r|d | d <|s|jd | | S) aBRequest machine token refresh from contract server. @param machine_token: The machine token needed to talk to this contract service endpoint. @param contract_id: Unique contract id provided by contract service. @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. @param detach: Boolean set True if detaching this machine from the active contract. Default is False. @return: Dict of the JSON response containing refreshed machine-token r4r5 machineId)ZcontractmachinerZDELETEmethodZPOSTr6Zexpiresr7) rr8r9r:*API_V1_TMPL_CONTEXT_MACHINE_TOKEN_RESOURCEr;rr=r>) rrArVr@rXrr6rkwargsrTrrrrZs$    z.UAContractClient._request_machine_token_updatecCs0|st|jj}t}|d}|||dS)z<"Return a dict of platform-relateddata for contract requestsrF)r^rIos)rZget_machine_idr=Zdata_dirrKpop)rr@rOrFrrrr:s  z#UAContractClient._get_platform_data)N)N)N)NF)r/r0r1Zcfg_url_base_attrr Z api_error_clsrCrPrZAutoAttachCloudInstancerUstrr\r]boolrZr:rrrrr3Ds<     &r3FcCsddlm}t|t||}|r|did}|sN|did}|sbtd||z ||}Wn$tk rt d||YSX|}|j |||d|S)a:Process a entitlement access dictionary deltas if they exist. :param orig_access: Dict with original entitlement access details before contract refresh deltas :param orig_access: Dict with updated entitlement access details after contract refresh :param allow_enable: Boolean set True if allowed to perform the enable operation. When False, a message will be logged to inform the user about the recommended enabled service. :raise UserFacingError: on failure to process deltas. :return: Dict of processed deltas r)ENTITLEMENT_CLASS_BY_NAME entitlementtypez5Could not determine contract delta service type {} {}z3Skipping entitlement deltas for "%s". No such class allow_enable) Zuaclient.entitlementsrgrZapply_series_overridesZget_dict_deltasr RuntimeErrorr9KeyErrorloggingdebugZprocess_contract_deltas)Z orig_accessZ new_accessrkrgZdeltasnameZent_clsrhrrrprocess_entitlement_deltas:     rqz Optional[str]r?c Cs|j}|j}|r|rtdt|}|rz|j|d}Wqtjk r}zTt|trnt |krjt t j |ttt|W5QRXt t jW5d}~XYqXn&|d}|ddd} |j|| d}|ddd } | rt| d tkrt t jd } d } t|jD]\} }zt|| i||d Wnt j k rd } ttdj| |dW5QRXYnBtk rd } ttdj| |dW5QRXYnXq&| rt t jn| rt t jdS)afRequest contract refresh from ua-contracts service. Compare original token to new token and react to entitlement deltas. :param cfg: Instance of UAConfig for this machine. :param contract_token: String contraining an optional contract token. :param allow_enable: Boolean set True if allowed to perform the enable operation. When False, a message will be logged to inform the user about the recommended enabled service. :raise UserFacingError: on failure to update contract or error processing contract deltas :raise UrlError: On failure to contact the server zUnexpected error processing contract delta for {name}: {delta}) rAZ entitlementsrlr3rCrUrlErrorr)r API_ERROR_INVALID_TOKENrZUserFacingErrorrZMESSAGE_ATTACH_INVALID_TOKENZdisable_log_to_consolernZ exceptionreZMESSAGE_CONNECTIVITY_ERRORr\rrstrptimeZutcnowZMESSAGE_CONTRACT_EXPIRED_ERRORsorteditemsrqr9 ExceptionZMESSAGE_UNEXPECTED_ERRORZ'MESSAGE_ATTACH_FAILURE_DEFAULT_SERVICES)r=r?rkZ orig_tokenZorig_entitlementsZcontract_clientZ new_tokenrrArVZexpiryZ delta_errorZunexpected_errorrpZnew_entitlementrrrrequest_updated_contracts        rzz List[Dict]rDcCst|}|}|dgS)zCQuery available resources from the contrct server for this machine. resources)r3rPr)r=Zclientr{rrrget_available_resources=sr|)F)NF)rrnrMZuaclientrrrrrtypingrr r r ImportErrorrur<rarLZ#API_V1_TMPL_RESOURCE_MACHINE_ACCESSrSrtr ZUAServiceClientr3rqrzr|rrrrs8      '} + R