57 lines
2.2 KiB
Python
57 lines
2.2 KiB
Python
# -*- coding: utf-8 -*- #
|
|
# Copyright 2018 Google LLC. All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
"""Export Binary Authorization policy command."""
|
|
|
|
from __future__ import absolute_import
|
|
from __future__ import division
|
|
from __future__ import unicode_literals
|
|
|
|
from googlecloudsdk.api_lib.container.binauthz import apis
|
|
from googlecloudsdk.api_lib.container.binauthz import policies
|
|
from googlecloudsdk.api_lib.container.binauthz import util
|
|
from googlecloudsdk.calliope import base
|
|
from googlecloudsdk.core.exceptions import Error
|
|
|
|
OLD_SYSTEM_POLICY_PROJECT_NAME = 'binauthz-global-policy'
|
|
|
|
|
|
@base.DefaultUniverseOnly
|
|
class Export(base.Command):
|
|
"""Export the Binary Authorization policy for the current project.
|
|
|
|
This function's default output is a valid policy YAML file. If dumped to a
|
|
file and edited, the new policy can be provided to the `$ {parent_command}
|
|
import` command to cause these edits to be reflected in the project policy.
|
|
|
|
## EXAMPLES
|
|
|
|
To export the current project's policy:
|
|
|
|
$ {command} > my_policy.yaml
|
|
"""
|
|
|
|
def Run(self, args):
|
|
api_version = apis.GetApiVersion(self.ReleaseTrack())
|
|
ref = util.GetPolicyRef()
|
|
if ref.Name() == OLD_SYSTEM_POLICY_PROJECT_NAME:
|
|
raise Error(
|
|
'The Binary Authorization system policy is no longer accessible via '
|
|
'the binauthz-global-policy project. Use the following command to '
|
|
'display the system policy:\n'
|
|
' $ gcloud alpha container binauthz policy export-system-policy\n'
|
|
'For details, see https://cloud.google.com/binary-authorization/docs/'
|
|
'key-concepts#google-maintained_system_images.')
|
|
return policies.Client(api_version).Get(ref)
|