feat: Add new gcloud commands, API clients, and third-party libraries across various services.

gcloud auth application-default login/google-cloud-sdk/lib/surface/sql/ssl_certs/__init__.py

@@ -0,0 +1,40 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2013 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Provide commands for managing SSL certificates of Cloud SQL instances."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.calliope import base
+from googlecloudsdk.calliope import exceptions
+
+_DEPRECATION_WARNING = (
+    '`gcloud sql ssl-certs` is deprecated. Use `gcloud sql ssl client-certs` '
+    'instead.')
+
+
+@base.Deprecate(is_removed=False, warning=_DEPRECATION_WARNING)
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA,
+                    base.ReleaseTrack.ALPHA)
+class SslCerts(base.Group):
+  """Provide commands for managing SSL certificates of Cloud SQL instances.
+
+  Provide commands for managing SSL certificates of Cloud SQL instances,
+  including creating, deleting, listing, and getting information about
+  certificates.
+  """
+  category = base.DATABASES_CATEGORY

gcloud auth application-default login/google-cloud-sdk/lib/surface/sql/ssl_certs/create.py

@@ -0,0 +1,114 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2013 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Creates an SSL certificate for a Cloud SQL instance."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+import os
+from googlecloudsdk.api_lib.sql import api_util
+from googlecloudsdk.api_lib.sql import exceptions
+from googlecloudsdk.api_lib.sql import validate
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.sql import flags
+from googlecloudsdk.core import log
+from googlecloudsdk.core import properties
+from googlecloudsdk.core.util import files
+import six
+
+
+class _BaseAddCert(object):
+  """Base class for sql ssl_certs create."""
+
+  @staticmethod
+  def Args(parser):
+    """Declare flag and positional arguments for the command parser."""
+    parser.add_argument(
+        'common_name',
+        help='User supplied name. Constrained to ```[a-zA-Z.-_ ]+```.')
+    parser.add_argument(
+        'cert_file',
+        default=None,
+        help=('Location of file which the private key of the created ssl-cert'
+              ' will be written to.'))
+    flags.AddInstance(parser)
+    parser.display_info.AddFormat(flags.CLIENT_CERTS_FORMAT)
+
+  def Run(self, args):
+    """Creates an SSL certificate for a Cloud SQL instance.
+
+    Args:
+      args: argparse.Namespace, The arguments that this command was invoked
+          with.
+
+    Returns:
+      A dict object representing the operations resource describing the create
+      operation if the create was successful.
+    Raises:
+      ArgumentError: If the file path provided cannot be written to.
+    """
+
+    if os.path.exists(args.cert_file):
+      raise exceptions.ArgumentError(
+          'file [{path}] already exists'.format(path=args.cert_file))
+
+    # First check if args.out_file is writeable. If not, abort and don't create
+    # the useless cert.
+    try:
+      files.WriteFileContents(
+          args.cert_file, 'placeholder\n', private=True, create_path=False)
+    except (files.Error, OSError) as e:
+      raise exceptions.ArgumentError('unable to write [{path}]: {error}'.format(
+          path=args.cert_file, error=six.text_type(e)))
+
+    client = api_util.SqlClient(api_util.API_VERSION_DEFAULT)
+    sql_client = client.sql_client
+    sql_messages = client.sql_messages
+
+    validate.ValidateInstanceName(args.instance)
+    instance_ref = client.resource_parser.Parse(
+        args.instance,
+        params={'project': properties.VALUES.core.project.GetOrFail},
+        collection='sql.instances')
+
+    # TODO(b/36049399): figure out how to rectify the common_name and the
+    # sha1fingerprint, so that things can work with the resource parser.
+
+    result = sql_client.sslCerts.Insert(
+        sql_messages.SqlSslCertsInsertRequest(
+            project=instance_ref.project,
+            instance=instance_ref.instance,
+            sslCertsInsertRequest=sql_messages.SslCertsInsertRequest(
+                commonName=args.common_name)))
+
+    private_key = result.clientCert.certPrivateKey
+    files.WriteFileContents(args.cert_file, private_key + '\n', private=True)
+
+    cert_ref = client.resource_parser.Create(
+        collection='sql.sslCerts',
+        project=instance_ref.project,
+        instance=instance_ref.instance,
+        sha1Fingerprint=result.clientCert.certInfo.sha1Fingerprint)
+
+    log.CreatedResource(cert_ref)
+    return result.clientCert.certInfo
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA,
+                    base.ReleaseTrack.ALPHA)
+class AddCert(_BaseAddCert, base.CreateCommand):
+  """Creates an SSL certificate for a Cloud SQL instance."""
+  pass

gcloud auth application-default login/google-cloud-sdk/lib/surface/sql/ssl_certs/delete.py

@@ -0,0 +1,116 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2013 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Deletes an SSL certificate for a Cloud SQL instance."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.sql import api_util
+from googlecloudsdk.api_lib.sql import cert
+from googlecloudsdk.api_lib.sql import exceptions
+from googlecloudsdk.api_lib.sql import operations
+from googlecloudsdk.api_lib.sql import validate
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.sql import flags
+from googlecloudsdk.core import log
+from googlecloudsdk.core import properties
+from googlecloudsdk.core.console import console_io
+
+
+class _BaseDelete(object):
+  """Base class for sql ssl_certs delete."""
+
+  @staticmethod
+  def Args(parser):
+    """Args is called by calliope to gather arguments for this command.
+
+    Args:
+      parser: An argparse parser that you can use to add arguments that go
+          on the command line after this command. Positional arguments are
+          allowed.
+    """
+    base.ASYNC_FLAG.AddToParser(parser)
+    parser.add_argument(
+        'common_name',
+        help='User supplied name. Constrained to ```[a-zA-Z.-_ ]+```.')
+    flags.AddInstance(parser)
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA,
+                    base.ReleaseTrack.ALPHA)
+class Delete(_BaseDelete, base.Command):
+  """Deletes an SSL certificate for a Cloud SQL instance."""
+
+  def Run(self, args):
+    """Deletes an SSL certificate for a Cloud SQL instance.
+
+    Args:
+      args: argparse.Namespace, The arguments that this command was invoked
+          with.
+
+    Returns:
+      A dict object representing the operations resource describing the delete
+      operation if the api request was successful.
+    Raises:
+      ResourceNotFoundError: The ssl cert could not be found for the instance.
+    """
+    client = api_util.SqlClient(api_util.API_VERSION_DEFAULT)
+    sql_client = client.sql_client
+    sql_messages = client.sql_messages
+
+    validate.ValidateInstanceName(args.instance)
+    instance_ref = client.resource_parser.Parse(
+        args.instance,
+        params={'project': properties.VALUES.core.project.GetOrFail},
+        collection='sql.instances')
+
+    # TODO(b/36050482): figure out how to rectify the common_name and the
+    # sha1fingerprint, so that things can work with the resource parser.
+
+    console_io.PromptContinue(
+        message='{0} will be deleted. New connections can no longer be made '
+        'using this certificate. Existing connections are not affected.'.format(
+            args.common_name),
+        default=True,
+        cancel_on_no=True)
+
+    cert_ref = cert.GetCertRefFromName(sql_client, sql_messages,
+                                       client.resource_parser, instance_ref,
+                                       args.common_name)
+    if not cert_ref:
+      raise exceptions.ResourceNotFoundError(
+          'no ssl cert named [{name}] for instance [{instance}]'.format(
+              name=args.common_name, instance=instance_ref))
+
+    result = sql_client.sslCerts.Delete(
+        sql_messages.SqlSslCertsDeleteRequest(
+            project=cert_ref.project,
+            instance=cert_ref.instance,
+            sha1Fingerprint=cert_ref.sha1Fingerprint))
+
+    operation_ref = client.resource_parser.Create(
+        'sql.operations', operation=result.name, project=cert_ref.project)
+
+    if args.async_:
+      return sql_client.operations.Get(
+          sql_messages.SqlOperationsGetRequest(
+              project=operation_ref.project,
+              operation=operation_ref.operation))
+
+    operations.OperationsV1Beta4.WaitForOperation(sql_client, operation_ref,
+                                                  'Deleting sslCert')
+
+    log.DeletedResource(cert_ref)

gcloud auth application-default login/google-cloud-sdk/lib/surface/sql/ssl_certs/describe.py

@@ -0,0 +1,76 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2013 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Retrieves information about an SSL cert for a Cloud SQL instance."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.sql import api_util
+from googlecloudsdk.api_lib.sql import cert
+from googlecloudsdk.api_lib.sql import validate
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.sql import flags
+from googlecloudsdk.core import properties
+
+
+class _BaseGet(object):
+  """Base class for sql ssl_certs list."""
+
+  @staticmethod
+  def Args(parser):
+    """Args is called by calliope to gather arguments for this command.
+
+    Args:
+      parser: An argparse parser that you can use it to add arguments that go
+          on the command line after this command. Positional arguments are
+          allowed.
+    """
+    parser.add_argument(
+        'common_name',
+        help='User supplied name. Constrained to ```[a-zA-Z.-_ ]+```.')
+    flags.AddInstance(parser)
+
+  def Run(self, args):
+    """Retrieves information about an SSL cert for a Cloud SQL instance.
+
+    Args:
+      args: argparse.Namespace, The arguments that this command was invoked
+          with.
+
+    Returns:
+      A dict object representing the sslCerts resource if the api request was
+      successful.
+    """
+    client = api_util.SqlClient(api_util.API_VERSION_DEFAULT)
+    sql_client = client.sql_client
+    sql_messages = client.sql_messages
+
+    validate.ValidateInstanceName(args.instance)
+    instance_ref = client.resource_parser.Parse(
+        args.instance,
+        params={'project': properties.VALUES.core.project.GetOrFail},
+        collection='sql.instances')
+
+    # sha1fingerprint, so that things can work with the resource parser.
+    return cert.GetCertFromName(sql_client, sql_messages, instance_ref,
+                                args.common_name)
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA,
+                    base.ReleaseTrack.ALPHA)
+class Get(_BaseGet, base.DescribeCommand):
+  """Retrieves information about an SSL cert for a Cloud SQL instance."""
+  pass

gcloud auth application-default login/google-cloud-sdk/lib/surface/sql/ssl_certs/list.py

@@ -0,0 +1,67 @@
+# -*- coding: utf-8 -*- #
+# Copyright 2013 Google LLC. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#    http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+"""Lists all SSL certs for a Cloud SQL instance."""
+
+from __future__ import absolute_import
+from __future__ import division
+from __future__ import unicode_literals
+
+from googlecloudsdk.api_lib.sql import api_util
+from googlecloudsdk.api_lib.sql import validate
+from googlecloudsdk.calliope import base
+from googlecloudsdk.command_lib.sql import flags
+from googlecloudsdk.core import properties
+
+
+class _BaseList(object):
+  """Base class for sql ssl_certs list."""
+
+  @staticmethod
+  def Args(parser):
+    flags.AddInstance(parser)
+    parser.display_info.AddFormat(flags.CLIENT_CERTS_FORMAT)
+
+  def Run(self, args):
+    """Lists all SSL certs for a Cloud SQL instance.
+
+    Args:
+      args: argparse.Namespace, The arguments that this command was invoked
+          with.
+
+    Returns:
+      A dict object that has the list of sslCerts resources if the api request
+      was successful.
+    """
+    client = api_util.SqlClient(api_util.API_VERSION_DEFAULT)
+    sql_client = client.sql_client
+    sql_messages = client.sql_messages
+
+    validate.ValidateInstanceName(args.instance)
+    instance_ref = client.resource_parser.Parse(
+        args.instance,
+        params={'project': properties.VALUES.core.project.GetOrFail},
+        collection='sql.instances')
+
+    result = sql_client.sslCerts.List(
+        sql_messages.SqlSslCertsListRequest(
+            project=instance_ref.project, instance=instance_ref.instance))
+    return iter(result.items)
+
+
+@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.BETA,
+                    base.ReleaseTrack.ALPHA)
+class List(_BaseList, base.ListCommand):
+  """Lists all SSL certs for a Cloud SQL instance."""
+  pass