feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/api_lib/sql/ssl/__init__.py

@@ -0,0 +1 @@
+

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/api_lib/sql/ssl/entraid_certs.py

@@ -0,0 +1,154 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2025 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Common command-agnostic utility functions for entraid-certs commands."""
+
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+ACTIVE_CERT_LABEL = 'Active'
+NEXT_CERT_LABEL = 'Next'
+PREVIOUS_CERT_LABEL = 'Previous'
+
+
+def ListEntraIdCertificates(sql_client, sql_messages, instance_ref):
+  """Calls the list entraid certs endpoint and returns the response."""
+  return sql_client.instances.ListEntraIdCertificates(
+      sql_messages.SqlInstancesListEntraIdCertificatesRequest(
+          project=instance_ref.project, instance=instance_ref.instance
+      )
+  )
+
+
+def _GetCurrentEntraIdCertificate(list_entraid_certs_response):
+  """Returns the current Entra ID Cert."""
+  entraid_cert_types = GetEntraIdCertificateTypeDict(
+      list_entraid_certs_response
+  )
+  return (entraid_cert_types.get(ACTIVE_CERT_LABEL), ACTIVE_CERT_LABEL)
+
+
+def GetNextEntraIdCertificate(sql_client, sql_messages, instance_ref):
+  """Returns the next Entra ID Cert."""
+  list_entraid_certs_response = ListEntraIdCertificates(
+      sql_client, sql_messages, instance_ref
+  )
+  return _GetNextEntraIdCertificateFromListResponse(list_entraid_certs_response)
+
+
+def _GetNextEntraIdCertificateFromListResponse(list_entraid_certs_response):
+  entraid_cert_types = GetEntraIdCertificateTypeDict(
+      list_entraid_certs_response
+  )
+  return (entraid_cert_types.get(NEXT_CERT_LABEL), NEXT_CERT_LABEL)
+
+
+def GetPreviousEntraIdCertificate(sql_client, sql_messages, instance_ref):
+  """Returns the previous Entra ID Cert.
+
+  Args:
+    sql_client: Sql client.
+    sql_messages: Sql messages.
+    instance_ref: Instance reference.
+
+  Returns:
+    A tuple of the previous Entra ID Cert and the status of the cert.
+  """
+  list_entraid_certs_response = ListEntraIdCertificates(
+      sql_client, sql_messages, instance_ref
+  )
+  return _GetPreviousEntraIdCertificate(list_entraid_certs_response)
+
+
+def _GetPreviousEntraIdCertificate(list_entraid_certs_response):
+  entraid_cert_types = GetEntraIdCertificateTypeDict(
+      list_entraid_certs_response
+  )
+  return (entraid_cert_types.get(PREVIOUS_CERT_LABEL), PREVIOUS_CERT_LABEL)
+
+
+def GetAddedEntraIdCertificate(sql_client, sql_messages, instance_ref):
+  """Returns the added Entra ID Cert.
+
+  If this is the first cert, that cert will be Active. Subsequent certs will be
+  Next.
+
+  Args:
+    sql_client: Sql client.
+    sql_messages: Sql messages.
+    instance_ref: Instance reference.
+
+  Returns:
+    A tuple of the added Entra ID Cert and the status of the cert.
+  """
+  list_entraid_certs_response = ListEntraIdCertificates(
+      sql_client, sql_messages, instance_ref
+  )
+  if len(list_entraid_certs_response.certs) == 1:
+    return _GetCurrentEntraIdCertificate(list_entraid_certs_response)
+  else:
+    return _GetNextEntraIdCertificateFromListResponse(
+        list_entraid_certs_response
+    )
+
+
+def GetEntraIdCertificateTypeDict(list_entraid_certs_response):
+  """Gets a dictionary mapping Entra ID Cert types to certs.
+
+  The keys to the dictionary returned will be some combination of 'Current',
+  'Next', and 'Previous'.
+
+  Args:
+    list_entraid_certs_response: InstancesListEntraIdCertificatesResponse
+      instance.
+
+  Returns:
+    A dictionary mapping Entra ID Cert types to SslCert instances.
+  """
+  entraid_cert_types = {}
+
+  active_id = list_entraid_certs_response.activeVersion
+
+  # Get the active cert.
+  certs = list_entraid_certs_response.certs
+  active_cert = None
+  for cert in certs:
+    if cert.sha1Fingerprint == active_id:
+      active_cert = cert
+      break
+  if not active_cert:
+    # No entraid cert types can be discerned; return an empty dict.
+    return entraid_cert_types
+  entraid_cert_types[ACTIVE_CERT_LABEL] = active_cert
+
+  # Get the inactive certs.
+  inactive_certs = [cert for cert in certs if cert.sha1Fingerprint != active_id]
+  if len(inactive_certs) == 1:
+    inactive_cert = inactive_certs[0]
+    if inactive_cert.createTime > active_cert.createTime:
+      # Found the next cert.
+      entraid_cert_types[NEXT_CERT_LABEL] = inactive_cert
+    else:
+      # Found the previous cert.
+      entraid_cert_types[PREVIOUS_CERT_LABEL] = inactive_cert
+  elif len(inactive_certs) > 1:
+    # Sort by expiration date.
+    inactive_certs = sorted(inactive_certs, key=lambda cert: cert.createTime)
+    entraid_cert_types[PREVIOUS_CERT_LABEL] = inactive_certs[0]
+    entraid_cert_types[NEXT_CERT_LABEL] = inactive_certs[-1]
+
+  return entraid_cert_types

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/api_lib/sql/ssl/server_ca_certs.py

@@ -0,0 +1,98 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2018 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Common command-agnostic utility functions for server-ca-certs commands."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+ACTIVE_CERT_LABEL = 'Current'
+NEXT_CERT_LABEL = 'Next'
+PREVIOUS_CERT_LABEL = 'Previous'
+
+
+def ListServerCas(sql_client, sql_messages, instance_ref):
+  """Calls the list server CAs endpoint and returns the response."""
+  return sql_client.instances.ListServerCas(
+      sql_messages.SqlInstancesListServerCasRequest(
+          project=instance_ref.project, instance=instance_ref.instance))
+
+
+def GetServerCaTypeDict(list_server_cas_response):
+  """Gets a dictionary mapping Server CA Cert types to certs.
+
+  The keys to the dictionary returned will be some combinatiaon of 'Current',
+  'Next', and 'Previous'.
+
+  Args:
+    list_server_cas_response: InstancesListServerCasResponse instance.
+
+  Returns:
+    A dictionary mapping Server CA Cert types to SslCert instances.
+  """
+  server_ca_types = {}
+
+  active_id = list_server_cas_response.activeVersion
+
+  # Get the active cert.
+  certs = list_server_cas_response.certs
+  active_cert = None
+  for cert in certs:
+    if cert.sha1Fingerprint == active_id:
+      active_cert = cert
+      break
+  if not active_cert:
+    # No server CA types can be discerned; return an empty dict.
+    return server_ca_types
+  server_ca_types[ACTIVE_CERT_LABEL] = active_cert
+
+  # Get the inactive certs.
+  inactive_certs = [cert for cert in certs if cert.sha1Fingerprint != active_id]
+  if len(inactive_certs) == 1:
+    inactive_cert = inactive_certs[0]
+    if inactive_cert.createTime > active_cert.createTime:
+      # Found the next cert.
+      server_ca_types[NEXT_CERT_LABEL] = inactive_cert
+    else:
+      # Found the previous cert.
+      server_ca_types[PREVIOUS_CERT_LABEL] = inactive_cert
+  elif len(inactive_certs) > 1:
+    # Sort by expiration date.
+    inactive_certs = sorted(inactive_certs, key=lambda cert: cert.createTime)
+    server_ca_types[PREVIOUS_CERT_LABEL] = inactive_certs[0]
+    server_ca_types[NEXT_CERT_LABEL] = inactive_certs[-1]
+
+  return server_ca_types
+
+
+def GetCurrentServerCa(sql_client, sql_messages, instance_ref):
+  """Returns the currently active Server CA Cert."""
+  server_ca_types = GetServerCaTypeDict(
+      ListServerCas(sql_client, sql_messages, instance_ref))
+  return server_ca_types.get(ACTIVE_CERT_LABEL)
+
+
+def GetNextServerCa(sql_client, sql_messages, instance_ref):
+  """Returns the upcoming Server CA Cert."""
+  server_ca_types = GetServerCaTypeDict(
+      ListServerCas(sql_client, sql_messages, instance_ref))
+  return server_ca_types.get(NEXT_CERT_LABEL)
+
+
+def GetPreviousServerCa(sql_client, sql_messages, instance_ref):
+  """Returns the previously active Server CA Cert."""
+  server_ca_types = GetServerCaTypeDict(
+      ListServerCas(sql_client, sql_messages, instance_ref))
+  return server_ca_types.get(PREVIOUS_CERT_LABEL)

gcloud auth application-default login/google-cloud-sdk/lib/googlecloudsdk/api_lib/sql/ssl/server_certs.py

@@ -0,0 +1,104 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2024 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Common command-agnostic utility functions for server-certs commands."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+ACTIVE_CERT_LABEL = 'Active'
+NEXT_CERT_LABEL = 'Next'
+PREVIOUS_CERT_LABEL = 'Previous'
+
+
+def ListServerCertificates(sql_client, sql_messages, instance_ref):
+  """Calls the list server certs endpoint and returns the response."""
+  return sql_client.instances.ListServerCertificates(
+      sql_messages.SqlInstancesListServerCertificatesRequest(
+          project=instance_ref.project, instance=instance_ref.instance
+      )
+  )
+
+
+def GetServerCertificateTypeDict(list_server_certs_response):
+  """Gets a dictionary mapping Server Cert types to certs.
+
+  The keys to the dictionary returned will be some combinatiaon of 'Current',
+  'Next', and 'Previous'.
+
+  Args:
+    list_server_certs_response: InstancesListServerCertificatesResponse
+      instance.
+
+  Returns:
+    A dictionary mapping Server Cert types to SslCert instances.
+  """
+  server_cert_types = {}
+
+  active_id = list_server_certs_response.activeVersion
+
+  # Get the active cert.
+  certs = list_server_certs_response.serverCerts
+  active_cert = None
+  for cert in certs:
+    if cert.sha1Fingerprint == active_id:
+      active_cert = cert
+      break
+  if not active_cert:
+    # No server cert types can be discerned; return an empty dict.
+    return server_cert_types
+  server_cert_types[ACTIVE_CERT_LABEL] = active_cert
+
+  # Get the inactive certs.
+  inactive_certs = [cert for cert in certs if cert.sha1Fingerprint != active_id]
+  if len(inactive_certs) == 1:
+    inactive_cert = inactive_certs[0]
+    if inactive_cert.createTime > active_cert.createTime:
+      # Found the next cert.
+      server_cert_types[NEXT_CERT_LABEL] = inactive_cert
+    else:
+      # Found the previous cert.
+      server_cert_types[PREVIOUS_CERT_LABEL] = inactive_cert
+  elif len(inactive_certs) > 1:
+    # Sort by expiration date.
+    inactive_certs = sorted(inactive_certs, key=lambda cert: cert.createTime)
+    server_cert_types[PREVIOUS_CERT_LABEL] = inactive_certs[0]
+    server_cert_types[NEXT_CERT_LABEL] = inactive_certs[-1]
+
+  return server_cert_types
+
+
+def GetCurrentServerCertificate(sql_client, sql_messages, instance_ref):
+  """Returns the currently active Server Cert."""
+  server_cert_types = GetServerCertificateTypeDict(
+      ListServerCertificates(sql_client, sql_messages, instance_ref)
+  )
+  return server_cert_types.get(ACTIVE_CERT_LABEL)
+
+
+def GetNextServerCertificate(sql_client, sql_messages, instance_ref):
+  """Returns the upcoming Server Cert."""
+  server_cert_types = GetServerCertificateTypeDict(
+      ListServerCertificates(sql_client, sql_messages, instance_ref)
+  )
+  return server_cert_types.get(NEXT_CERT_LABEL)
+
+
+def GetPreviousServerCertificate(sql_client, sql_messages, instance_ref):
+  """Returns the previously active Server Cert."""
+  server_cert_types = GetServerCertificateTypeDict(
+      ListServerCertificates(sql_client, sql_messages, instance_ref)
+  )
+  return server_cert_types.get(PREVIOUS_CERT_LABEL)