135 lines
4.4 KiB
Python
135 lines
4.4 KiB
Python
# -*- coding: utf-8 -*- #
|
|
# Copyright 2020 Google LLC. All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
"""Hooks for Privateca surface."""
|
|
|
|
from __future__ import absolute_import
|
|
from __future__ import division
|
|
from __future__ import unicode_literals
|
|
|
|
from googlecloudsdk.api_lib.privateca import base
|
|
from googlecloudsdk.api_lib.privateca import request_utils
|
|
from googlecloudsdk.command_lib.privateca import resource_args
|
|
from googlecloudsdk.core.util import times
|
|
|
|
|
|
def CheckResponseSubordinateTypeHook(version='v1'):
|
|
"""Raises an exception if the response is not a subordinate ca."""
|
|
|
|
def CheckResponseSubordinateTypeHookVersioned(response, unused_args):
|
|
resource_args.CheckExpectedCAType(
|
|
base.GetMessagesModule(
|
|
api_version=version
|
|
).CertificateAuthority.TypeValueValuesEnum.SUBORDINATE,
|
|
response,
|
|
version=version,
|
|
)
|
|
|
|
return response
|
|
|
|
return CheckResponseSubordinateTypeHookVersioned
|
|
|
|
|
|
def CheckResponseRootTypeHook(version='v1'):
|
|
"""Raises an exception if the response is not a root ca."""
|
|
|
|
def CheckResponseRootTypeHookVersioned(response, unused_args):
|
|
resource_args.CheckExpectedCAType(
|
|
base.GetMessagesModule(
|
|
api_version=version
|
|
).CertificateAuthority.TypeValueValuesEnum.SELF_SIGNED,
|
|
response,
|
|
version=version,
|
|
)
|
|
return response
|
|
|
|
return CheckResponseRootTypeHookVersioned
|
|
|
|
|
|
def _CheckRequestTypeHook(resource_ref, expected_type, version='v1'):
|
|
"""Do a get on a CA resource and check its type against expected_type."""
|
|
client = base.GetClientInstance(api_version=version)
|
|
messages = base.GetMessagesModule(api_version=version)
|
|
certificate_authority = client.projects_locations_caPools_certificateAuthorities.Get(
|
|
messages.PrivatecaProjectsLocationsCaPoolsCertificateAuthoritiesGetRequest(
|
|
name=resource_ref.RelativeName()
|
|
)
|
|
)
|
|
|
|
resource_args.CheckExpectedCAType(expected_type, certificate_authority)
|
|
|
|
|
|
def CheckRequestRootTypeHook(version='v1'):
|
|
"""Raises an exception if the request is not for a root ca."""
|
|
|
|
def CheckRequestRootTypeHookVersioned(resource_ref, unused_args, request):
|
|
_CheckRequestTypeHook(
|
|
resource_ref,
|
|
base.GetMessagesModule(
|
|
api_version=version
|
|
).CertificateAuthority.TypeValueValuesEnum.SELF_SIGNED,
|
|
)
|
|
|
|
return request
|
|
|
|
return CheckRequestRootTypeHookVersioned
|
|
|
|
|
|
def CheckRequestSubordinateTypeHook(version='v1'):
|
|
"""Raises an exception if the request is not for a subordinate ca."""
|
|
|
|
def CheckRequestSubordinateTypeHookVersioned(
|
|
resource_ref, unused_args, request
|
|
):
|
|
_CheckRequestTypeHook(
|
|
resource_ref,
|
|
base.GetMessagesModule(
|
|
api_version=version
|
|
).CertificateAuthority.TypeValueValuesEnum.SUBORDINATE,
|
|
)
|
|
return request
|
|
|
|
return CheckRequestSubordinateTypeHookVersioned
|
|
|
|
|
|
def AddRequestIdHook(unused_ref, unused_args, request):
|
|
"""Fills a unique identifier for a request with a requestId field."""
|
|
request.requestId = request_utils.GenerateRequestId()
|
|
return request
|
|
|
|
|
|
def _ConvertProtoToIsoDuration(proto_duration_str):
|
|
"""Convert a given 'proto duration' string to an ISO8601 duration string."""
|
|
return times.FormatDuration(times.ParseDuration(proto_duration_str, True))
|
|
|
|
|
|
def ConvertCertificateLifetimeToIso8601(response, unused_args):
|
|
"""Converts certificate lifetimes from proto duration format to ISO8601."""
|
|
|
|
# These fields could be None if the user specifies a filter that omits them.
|
|
if response.lifetime:
|
|
response.lifetime = _ConvertProtoToIsoDuration(response.lifetime)
|
|
if (
|
|
response.certificateDescription
|
|
and response.certificateDescription.subjectDescription
|
|
and response.certificateDescription.subjectDescription.lifetime
|
|
):
|
|
response.certificateDescription.subjectDescription.lifetime = (
|
|
_ConvertProtoToIsoDuration(
|
|
response.certificateDescription.subjectDescription.lifetime
|
|
)
|
|
)
|
|
|
|
return response
|