| #!/usr/bin/env python |
| """CLI for iam, version v1.""" |
| # NOTE: This file is autogenerated and should not be edited by hand. |
| |
| import code |
| import os |
| import platform |
| import sys |
| |
| from apitools.base.protorpclite import message_types |
| from apitools.base.protorpclite import messages |
| |
| from google.apputils import appcommands |
| import gflags as flags |
| |
| import apitools.base.py as apitools_base |
| from apitools.base.py import cli as apitools_base_cli |
| import iam_v1_client as client_lib |
| import iam_v1_messages as messages |
| |
| |
| def _DeclareIamFlags(): |
| """Declare global flags in an idempotent way.""" |
| if 'api_endpoint' in flags.FLAGS: |
| return |
| flags.DEFINE_string( |
| 'api_endpoint', |
| u'https://iam.googleapis.com/', |
| 'URL of the API endpoint to use.', |
| short_name='iam_url') |
| flags.DEFINE_string( |
| 'history_file', |
| u'~/.iam.v1.history', |
| 'File with interactive shell history.') |
| flags.DEFINE_multistring( |
| 'add_header', [], |
| 'Additional http headers (as key=value strings). ' |
| 'Can be specified multiple times.') |
| flags.DEFINE_string( |
| 'service_account_json_keyfile', '', |
| 'Filename for a JSON service account key downloaded' |
| ' from the Developer Console.') |
| flags.DEFINE_enum( |
| 'f__xgafv', |
| u'_1', |
| [u'_1', u'_2'], |
| u'V1 error format.') |
| flags.DEFINE_string( |
| 'access_token', |
| None, |
| u'OAuth access token.') |
| flags.DEFINE_enum( |
| 'alt', |
| u'json', |
| [u'json', u'media', u'proto'], |
| u'Data format for response.') |
| flags.DEFINE_string( |
| 'bearer_token', |
| None, |
| u'OAuth bearer token.') |
| flags.DEFINE_string( |
| 'callback', |
| None, |
| u'JSONP') |
| flags.DEFINE_string( |
| 'fields', |
| None, |
| u'Selector specifying which fields to include in a partial response.') |
| flags.DEFINE_string( |
| 'key', |
| None, |
| u'API key. Your API key identifies your project and provides you with ' |
| u'API access, quota, and reports. Required unless you provide an OAuth ' |
| u'2.0 token.') |
| flags.DEFINE_string( |
| 'oauth_token', |
| None, |
| u'OAuth 2.0 token for the current user.') |
| flags.DEFINE_boolean( |
| 'pp', |
| 'True', |
| u'Pretty-print response.') |
| flags.DEFINE_boolean( |
| 'prettyPrint', |
| 'True', |
| u'Returns response with indentations and line breaks.') |
| flags.DEFINE_string( |
| 'quotaUser', |
| None, |
| u'Available to use for quota purposes for server-side applications. Can' |
| u' be any arbitrary string assigned to a user, but should not exceed 40' |
| u' characters.') |
| flags.DEFINE_string( |
| 'trace', |
| None, |
| 'A tracing token of the form "token:<tokenid>" to include in api ' |
| 'requests.') |
| flags.DEFINE_string( |
| 'uploadType', |
| None, |
| u'Legacy upload protocol for media (e.g. "media", "multipart").') |
| flags.DEFINE_string( |
| 'upload_protocol', |
| None, |
| u'Upload protocol for media (e.g. "raw", "multipart").') |
| |
| |
| FLAGS = flags.FLAGS |
| apitools_base_cli.DeclareBaseFlags() |
| _DeclareIamFlags() |
| |
| |
| def GetGlobalParamsFromFlags(): |
| """Return a StandardQueryParameters based on flags.""" |
| result = messages.StandardQueryParameters() |
| if FLAGS['f__xgafv'].present: |
| result.f__xgafv = messages.StandardQueryParameters.FXgafvValueValuesEnum(FLAGS.f__xgafv) |
| if FLAGS['access_token'].present: |
| result.access_token = FLAGS.access_token.decode('utf8') |
| if FLAGS['alt'].present: |
| result.alt = messages.StandardQueryParameters.AltValueValuesEnum(FLAGS.alt) |
| if FLAGS['bearer_token'].present: |
| result.bearer_token = FLAGS.bearer_token.decode('utf8') |
| if FLAGS['callback'].present: |
| result.callback = FLAGS.callback.decode('utf8') |
| if FLAGS['fields'].present: |
| result.fields = FLAGS.fields.decode('utf8') |
| if FLAGS['key'].present: |
| result.key = FLAGS.key.decode('utf8') |
| if FLAGS['oauth_token'].present: |
| result.oauth_token = FLAGS.oauth_token.decode('utf8') |
| if FLAGS['pp'].present: |
| result.pp = FLAGS.pp |
| if FLAGS['prettyPrint'].present: |
| result.prettyPrint = FLAGS.prettyPrint |
| if FLAGS['quotaUser'].present: |
| result.quotaUser = FLAGS.quotaUser.decode('utf8') |
| if FLAGS['trace'].present: |
| result.trace = FLAGS.trace.decode('utf8') |
| if FLAGS['uploadType'].present: |
| result.uploadType = FLAGS.uploadType.decode('utf8') |
| if FLAGS['upload_protocol'].present: |
| result.upload_protocol = FLAGS.upload_protocol.decode('utf8') |
| return result |
| |
| |
| def GetClientFromFlags(): |
| """Return a client object, configured from flags.""" |
| log_request = FLAGS.log_request or FLAGS.log_request_response |
| log_response = FLAGS.log_response or FLAGS.log_request_response |
| api_endpoint = apitools_base.NormalizeApiEndpoint(FLAGS.api_endpoint) |
| additional_http_headers = dict(x.split('=', 1) for x in FLAGS.add_header) |
| credentials_args = { |
| 'service_account_json_keyfile': os.path.expanduser(FLAGS.service_account_json_keyfile) |
| } |
| try: |
| client = client_lib.IamV1( |
| api_endpoint, log_request=log_request, |
| log_response=log_response, |
| credentials_args=credentials_args, |
| additional_http_headers=additional_http_headers) |
| except apitools_base.CredentialsError as e: |
| print 'Error creating credentials: %s' % e |
| sys.exit(1) |
| return client |
| |
| |
| class PyShell(appcommands.Cmd): |
| |
| def Run(self, _): |
| """Run an interactive python shell with the client.""" |
| client = GetClientFromFlags() |
| params = GetGlobalParamsFromFlags() |
| for field in params.all_fields(): |
| value = params.get_assigned_value(field.name) |
| if value != field.default: |
| client.AddGlobalParam(field.name, value) |
| banner = """ |
| == iam interactive console == |
| client: a iam client |
| apitools_base: base apitools module |
| messages: the generated messages module |
| """ |
| local_vars = { |
| 'apitools_base': apitools_base, |
| 'client': client, |
| 'client_lib': client_lib, |
| 'messages': messages, |
| } |
| if platform.system() == 'Linux': |
| console = apitools_base_cli.ConsoleWithReadline( |
| local_vars, histfile=FLAGS.history_file) |
| else: |
| console = code.InteractiveConsole(local_vars) |
| try: |
| console.interact(banner) |
| except SystemExit as e: |
| return e.code |
| |
| |
| class IamPoliciesGetPolicyDetails(apitools_base_cli.NewCmd): |
| """Command wrapping iamPolicies.GetPolicyDetails.""" |
| |
| usage = """iamPolicies_getPolicyDetails""" |
| |
| def __init__(self, name, fv): |
| super(IamPoliciesGetPolicyDetails, self).__init__(name, fv) |
| flags.DEFINE_string( |
| 'fullResourcePath', |
| None, |
| u'REQUIRED: The full resource path of the current policy being ' |
| u'requested, e.g., `//dataflow.googleapis.com/projects/../jobs/..`.', |
| flag_values=fv) |
| flags.DEFINE_integer( |
| 'pageSize', |
| None, |
| u'Limit on the number of policies to include in the response. Further' |
| u' accounts can subsequently be obtained by including the ' |
| u'GetPolicyDetailsResponse.next_page_token in a subsequent request. ' |
| u'If zero, the default page size 20 will be used. Must be given a ' |
| u'value in range [0, 100], otherwise an invalid argument error will ' |
| u'be returned.', |
| flag_values=fv) |
| flags.DEFINE_string( |
| 'pageToken', |
| None, |
| u'Optional pagination token returned in an earlier ' |
| u'GetPolicyDetailsResponse.next_page_token response.', |
| flag_values=fv) |
| |
| def RunWithArgs(self): |
| """Returns the current IAM policy and the policies on the inherited |
| resources that the user has access to. |
| |
| Flags: |
| fullResourcePath: REQUIRED: The full resource path of the current policy |
| being requested, e.g., |
| `//dataflow.googleapis.com/projects/../jobs/..`. |
| pageSize: Limit on the number of policies to include in the response. |
| Further accounts can subsequently be obtained by including the |
| GetPolicyDetailsResponse.next_page_token in a subsequent request. If |
| zero, the default page size 20 will be used. Must be given a value in |
| range [0, 100], otherwise an invalid argument error will be returned. |
| pageToken: Optional pagination token returned in an earlier |
| GetPolicyDetailsResponse.next_page_token response. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.GetPolicyDetailsRequest( |
| ) |
| if FLAGS['fullResourcePath'].present: |
| request.fullResourcePath = FLAGS.fullResourcePath.decode('utf8') |
| if FLAGS['pageSize'].present: |
| request.pageSize = FLAGS.pageSize |
| if FLAGS['pageToken'].present: |
| request.pageToken = FLAGS.pageToken.decode('utf8') |
| result = client.iamPolicies.GetPolicyDetails( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsCreate(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts.Create.""" |
| |
| usage = """projects_serviceAccounts_create <name>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsCreate, self).__init__(name, fv) |
| flags.DEFINE_string( |
| 'createServiceAccountRequest', |
| None, |
| u'A CreateServiceAccountRequest resource to be passed as the request ' |
| u'body.', |
| flag_values=fv) |
| |
| def RunWithArgs(self, name): |
| """Creates a ServiceAccount and returns it. |
| |
| Args: |
| name: Required. The resource name of the project associated with the |
| service accounts, such as `projects/my-project-123`. |
| |
| Flags: |
| createServiceAccountRequest: A CreateServiceAccountRequest resource to |
| be passed as the request body. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsCreateRequest( |
| name=name.decode('utf8'), |
| ) |
| if FLAGS['createServiceAccountRequest'].present: |
| request.createServiceAccountRequest = apitools_base.JsonToMessage(messages.CreateServiceAccountRequest, FLAGS.createServiceAccountRequest) |
| result = client.projects_serviceAccounts.Create( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsDelete(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts.Delete.""" |
| |
| usage = """projects_serviceAccounts_delete <name>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsDelete, self).__init__(name, fv) |
| |
| def RunWithArgs(self, name): |
| """Deletes a ServiceAccount. |
| |
| Args: |
| name: The resource name of the service account in the following format: |
| `projects/{project}/serviceAccounts/{account}`. Using `-` as a |
| wildcard for the project will infer the project from the account. The |
| `account` value can be the `email` address or the `unique_id` of the |
| service account. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsDeleteRequest( |
| name=name.decode('utf8'), |
| ) |
| result = client.projects_serviceAccounts.Delete( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsGet(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts.Get.""" |
| |
| usage = """projects_serviceAccounts_get <name>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsGet, self).__init__(name, fv) |
| |
| def RunWithArgs(self, name): |
| """Gets a ServiceAccount. |
| |
| Args: |
| name: The resource name of the service account in the following format: |
| `projects/{project}/serviceAccounts/{account}`. Using `-` as a |
| wildcard for the project will infer the project from the account. The |
| `account` value can be the `email` address or the `unique_id` of the |
| service account. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsGetRequest( |
| name=name.decode('utf8'), |
| ) |
| result = client.projects_serviceAccounts.Get( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsGetIamPolicy(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts.GetIamPolicy.""" |
| |
| usage = """projects_serviceAccounts_getIamPolicy <resource>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsGetIamPolicy, self).__init__(name, fv) |
| |
| def RunWithArgs(self, resource): |
| """Returns the IAM access control policy for specified IAM resource. |
| |
| Args: |
| resource: REQUIRED: The resource for which the policy is being |
| requested. `resource` is usually specified as a path, such as |
| `projects/*project*/zones/*zone*/disks/*disk*`. The format for the |
| path specified in this value is resource specific and is specified in |
| the `getIamPolicy` documentation. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsGetIamPolicyRequest( |
| resource=resource.decode('utf8'), |
| ) |
| result = client.projects_serviceAccounts.GetIamPolicy( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsList(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts.List.""" |
| |
| usage = """projects_serviceAccounts_list <name>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsList, self).__init__(name, fv) |
| flags.DEFINE_integer( |
| 'pageSize', |
| None, |
| u'Optional limit on the number of service accounts to include in the ' |
| u'response. Further accounts can subsequently be obtained by ' |
| u'including the ListServiceAccountsResponse.next_page_token in a ' |
| u'subsequent request.', |
| flag_values=fv) |
| flags.DEFINE_string( |
| 'pageToken', |
| None, |
| u'Optional pagination token returned in an earlier ' |
| u'ListServiceAccountsResponse.next_page_token.', |
| flag_values=fv) |
| flags.DEFINE_boolean( |
| 'removeDeletedServiceAccounts', |
| None, |
| u'Do not list service accounts deleted from Gaia. <b><font ' |
| u'color="red">DO NOT INCLUDE IN EXTERNAL DOCUMENTATION</font></b>.', |
| flag_values=fv) |
| |
| def RunWithArgs(self, name): |
| """Lists ServiceAccounts for a project. |
| |
| Args: |
| name: Required. The resource name of the project associated with the |
| service accounts, such as `projects/my-project-123`. |
| |
| Flags: |
| pageSize: Optional limit on the number of service accounts to include in |
| the response. Further accounts can subsequently be obtained by |
| including the ListServiceAccountsResponse.next_page_token in a |
| subsequent request. |
| pageToken: Optional pagination token returned in an earlier |
| ListServiceAccountsResponse.next_page_token. |
| removeDeletedServiceAccounts: Do not list service accounts deleted from |
| Gaia. <b><font color="red">DO NOT INCLUDE IN EXTERNAL |
| DOCUMENTATION</font></b>. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsListRequest( |
| name=name.decode('utf8'), |
| ) |
| if FLAGS['pageSize'].present: |
| request.pageSize = FLAGS.pageSize |
| if FLAGS['pageToken'].present: |
| request.pageToken = FLAGS.pageToken.decode('utf8') |
| if FLAGS['removeDeletedServiceAccounts'].present: |
| request.removeDeletedServiceAccounts = FLAGS.removeDeletedServiceAccounts |
| result = client.projects_serviceAccounts.List( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsSetIamPolicy(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts.SetIamPolicy.""" |
| |
| usage = """projects_serviceAccounts_setIamPolicy <resource>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsSetIamPolicy, self).__init__(name, fv) |
| flags.DEFINE_string( |
| 'setIamPolicyRequest', |
| None, |
| u'A SetIamPolicyRequest resource to be passed as the request body.', |
| flag_values=fv) |
| |
| def RunWithArgs(self, resource): |
| """Sets the IAM access control policy for the specified IAM resource. |
| |
| Args: |
| resource: REQUIRED: The resource for which the policy is being |
| specified. `resource` is usually specified as a path, such as |
| `projects/*project*/zones/*zone*/disks/*disk*`. The format for the |
| path specified in this value is resource specific and is specified in |
| the `setIamPolicy` documentation. |
| |
| Flags: |
| setIamPolicyRequest: A SetIamPolicyRequest resource to be passed as the |
| request body. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsSetIamPolicyRequest( |
| resource=resource.decode('utf8'), |
| ) |
| if FLAGS['setIamPolicyRequest'].present: |
| request.setIamPolicyRequest = apitools_base.JsonToMessage(messages.SetIamPolicyRequest, FLAGS.setIamPolicyRequest) |
| result = client.projects_serviceAccounts.SetIamPolicy( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsSignBlob(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts.SignBlob.""" |
| |
| usage = """projects_serviceAccounts_signBlob <name>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsSignBlob, self).__init__(name, fv) |
| flags.DEFINE_string( |
| 'signBlobRequest', |
| None, |
| u'A SignBlobRequest resource to be passed as the request body.', |
| flag_values=fv) |
| |
| def RunWithArgs(self, name): |
| """Signs a blob using a service account's system-managed private key. |
| |
| Args: |
| name: The resource name of the service account in the following format: |
| `projects/{project}/serviceAccounts/{account}`. Using `-` as a |
| wildcard for the project will infer the project from the account. The |
| `account` value can be the `email` address or the `unique_id` of the |
| service account. |
| |
| Flags: |
| signBlobRequest: A SignBlobRequest resource to be passed as the request |
| body. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsSignBlobRequest( |
| name=name.decode('utf8'), |
| ) |
| if FLAGS['signBlobRequest'].present: |
| request.signBlobRequest = apitools_base.JsonToMessage(messages.SignBlobRequest, FLAGS.signBlobRequest) |
| result = client.projects_serviceAccounts.SignBlob( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsSignJwt(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts.SignJwt.""" |
| |
| usage = """projects_serviceAccounts_signJwt <name>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsSignJwt, self).__init__(name, fv) |
| flags.DEFINE_string( |
| 'signJwtRequest', |
| None, |
| u'A SignJwtRequest resource to be passed as the request body.', |
| flag_values=fv) |
| |
| def RunWithArgs(self, name): |
| """Signs a JWT using a service account's system-managed private key. If |
| no `exp` (expiry) time is contained in the claims, we will provide an |
| expiry of one hour in the future. If an expiry of more than one hour in |
| the future is requested, the request will fail. |
| |
| Args: |
| name: The resource name of the service account in the following format: |
| `projects/{project}/serviceAccounts/{account}`. Using `-` as a |
| wildcard for the project will infer the project from the account. The |
| `account` value can be the `email` address or the `unique_id` of the |
| service account. |
| |
| Flags: |
| signJwtRequest: A SignJwtRequest resource to be passed as the request |
| body. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsSignJwtRequest( |
| name=name.decode('utf8'), |
| ) |
| if FLAGS['signJwtRequest'].present: |
| request.signJwtRequest = apitools_base.JsonToMessage(messages.SignJwtRequest, FLAGS.signJwtRequest) |
| result = client.projects_serviceAccounts.SignJwt( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsTestIamPermissions(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts.TestIamPermissions.""" |
| |
| usage = """projects_serviceAccounts_testIamPermissions <resource>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsTestIamPermissions, self).__init__(name, fv) |
| flags.DEFINE_string( |
| 'testIamPermissionsRequest', |
| None, |
| u'A TestIamPermissionsRequest resource to be passed as the request ' |
| u'body.', |
| flag_values=fv) |
| |
| def RunWithArgs(self, resource): |
| """Tests the specified permissions against the IAM access control policy |
| for the specified IAM resource. |
| |
| Args: |
| resource: REQUIRED: The resource for which the policy detail is being |
| requested. `resource` is usually specified as a path, such as |
| `projects/*project*/zones/*zone*/disks/*disk*`. The format for the |
| path specified in this value is resource specific and is specified in |
| the `testIamPermissions` documentation. |
| |
| Flags: |
| testIamPermissionsRequest: A TestIamPermissionsRequest resource to be |
| passed as the request body. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsTestIamPermissionsRequest( |
| resource=resource.decode('utf8'), |
| ) |
| if FLAGS['testIamPermissionsRequest'].present: |
| request.testIamPermissionsRequest = apitools_base.JsonToMessage(messages.TestIamPermissionsRequest, FLAGS.testIamPermissionsRequest) |
| result = client.projects_serviceAccounts.TestIamPermissions( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsUpdate(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts.Update.""" |
| |
| usage = """projects_serviceAccounts_update <name>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsUpdate, self).__init__(name, fv) |
| flags.DEFINE_string( |
| 'description', |
| None, |
| u'Optional. A user-specified opaque description of the service ' |
| u'account.', |
| flag_values=fv) |
| flags.DEFINE_string( |
| 'displayName', |
| None, |
| u'Optional. A user-specified description of the service account. ' |
| u'Must be fewer than 100 UTF-8 bytes.', |
| flag_values=fv) |
| flags.DEFINE_string( |
| 'email', |
| None, |
| u'@OutputOnly The email address of the service account.', |
| flag_values=fv) |
| flags.DEFINE_string( |
| 'etag', |
| None, |
| u'Used to perform a consistent read-modify-write.', |
| flag_values=fv) |
| flags.DEFINE_string( |
| 'oauth2ClientId', |
| None, |
| u'@OutputOnly. The OAuth2 client id for the service account. This is ' |
| u'used in conjunction with the OAuth2 clientconfig API to make three ' |
| u'legged OAuth2 (3LO) flows to access the data of Google users.', |
| flag_values=fv) |
| flags.DEFINE_string( |
| 'projectId', |
| None, |
| u'@OutputOnly The id of the project that owns the service account.', |
| flag_values=fv) |
| flags.DEFINE_string( |
| 'uniqueId', |
| None, |
| u'@OutputOnly The unique and stable id of the service account.', |
| flag_values=fv) |
| |
| def RunWithArgs(self, name): |
| """Updates a ServiceAccount. Currently, only the following fields are |
| updatable: `display_name` . The `etag` is mandatory. |
| |
| Args: |
| name: The resource name of the service account in the following format: |
| `projects/{project}/serviceAccounts/{account}`. Requests using `-` as |
| a wildcard for the project will infer the project from the `account` |
| and the `account` value can be the `email` address or the `unique_id` |
| of the service account. In responses the resource name will always be |
| in the format `projects/{project}/serviceAccounts/{email}`. |
| |
| Flags: |
| description: Optional. A user-specified opaque description of the |
| service account. |
| displayName: Optional. A user-specified description of the service |
| account. Must be fewer than 100 UTF-8 bytes. |
| email: @OutputOnly The email address of the service account. |
| etag: Used to perform a consistent read-modify-write. |
| oauth2ClientId: @OutputOnly. The OAuth2 client id for the service |
| account. This is used in conjunction with the OAuth2 clientconfig API |
| to make three legged OAuth2 (3LO) flows to access the data of Google |
| users. |
| projectId: @OutputOnly The id of the project that owns the service |
| account. |
| uniqueId: @OutputOnly The unique and stable id of the service account. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.ServiceAccount( |
| name=name.decode('utf8'), |
| ) |
| if FLAGS['description'].present: |
| request.description = FLAGS.description.decode('utf8') |
| if FLAGS['displayName'].present: |
| request.displayName = FLAGS.displayName.decode('utf8') |
| if FLAGS['email'].present: |
| request.email = FLAGS.email.decode('utf8') |
| if FLAGS['etag'].present: |
| request.etag = FLAGS.etag |
| if FLAGS['oauth2ClientId'].present: |
| request.oauth2ClientId = FLAGS.oauth2ClientId.decode('utf8') |
| if FLAGS['projectId'].present: |
| request.projectId = FLAGS.projectId.decode('utf8') |
| if FLAGS['uniqueId'].present: |
| request.uniqueId = FLAGS.uniqueId.decode('utf8') |
| result = client.projects_serviceAccounts.Update( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsKeysCreate(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts_keys.Create.""" |
| |
| usage = """projects_serviceAccounts_keys_create <name>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsKeysCreate, self).__init__(name, fv) |
| flags.DEFINE_string( |
| 'createServiceAccountKeyRequest', |
| None, |
| u'A CreateServiceAccountKeyRequest resource to be passed as the ' |
| u'request body.', |
| flag_values=fv) |
| |
| def RunWithArgs(self, name): |
| """Creates a ServiceAccountKey and returns it. |
| |
| Args: |
| name: The resource name of the service account in the following format: |
| `projects/{project}/serviceAccounts/{account}`. Using `-` as a |
| wildcard for the project will infer the project from the account. The |
| `account` value can be the `email` address or the `unique_id` of the |
| service account. |
| |
| Flags: |
| createServiceAccountKeyRequest: A CreateServiceAccountKeyRequest |
| resource to be passed as the request body. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsKeysCreateRequest( |
| name=name.decode('utf8'), |
| ) |
| if FLAGS['createServiceAccountKeyRequest'].present: |
| request.createServiceAccountKeyRequest = apitools_base.JsonToMessage(messages.CreateServiceAccountKeyRequest, FLAGS.createServiceAccountKeyRequest) |
| result = client.projects_serviceAccounts_keys.Create( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsKeysDelete(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts_keys.Delete.""" |
| |
| usage = """projects_serviceAccounts_keys_delete <name>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsKeysDelete, self).__init__(name, fv) |
| |
| def RunWithArgs(self, name): |
| """Deletes a ServiceAccountKey. |
| |
| Args: |
| name: The resource name of the service account key in the following |
| format: `projects/{project}/serviceAccounts/{account}/keys/{key}`. |
| Using `-` as a wildcard for the project will infer the project from |
| the account. The `account` value can be the `email` address or the |
| `unique_id` of the service account. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsKeysDeleteRequest( |
| name=name.decode('utf8'), |
| ) |
| result = client.projects_serviceAccounts_keys.Delete( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsKeysGet(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts_keys.Get.""" |
| |
| usage = """projects_serviceAccounts_keys_get <name>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsKeysGet, self).__init__(name, fv) |
| flags.DEFINE_enum( |
| 'publicKeyType', |
| u'TYPE_NONE', |
| [u'TYPE_NONE', u'TYPE_X509_PEM_FILE', u'TYPE_RAW_PUBLIC_KEY'], |
| u'The output format of the public key requested. X509_PEM is the ' |
| u'default output format.', |
| flag_values=fv) |
| |
| def RunWithArgs(self, name): |
| """Gets the ServiceAccountKey by key id. |
| |
| Args: |
| name: The resource name of the service account key in the following |
| format: `projects/{project}/serviceAccounts/{account}/keys/{key}`. |
| Using `-` as a wildcard for the project will infer the project from |
| the account. The `account` value can be the `email` address or the |
| `unique_id` of the service account. |
| |
| Flags: |
| publicKeyType: The output format of the public key requested. X509_PEM |
| is the default output format. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsKeysGetRequest( |
| name=name.decode('utf8'), |
| ) |
| if FLAGS['publicKeyType'].present: |
| request.publicKeyType = messages.IamProjectsServiceAccountsKeysGetRequest.PublicKeyTypeValueValuesEnum(FLAGS.publicKeyType) |
| result = client.projects_serviceAccounts_keys.Get( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class ProjectsServiceAccountsKeysList(apitools_base_cli.NewCmd): |
| """Command wrapping projects_serviceAccounts_keys.List.""" |
| |
| usage = """projects_serviceAccounts_keys_list <name>""" |
| |
| def __init__(self, name, fv): |
| super(ProjectsServiceAccountsKeysList, self).__init__(name, fv) |
| flags.DEFINE_enum( |
| 'keyTypes', |
| u'KEY_TYPE_UNSPECIFIED', |
| [u'KEY_TYPE_UNSPECIFIED', u'USER_MANAGED', u'SYSTEM_MANAGED'], |
| u'Filters the types of keys the user wants to include in the list ' |
| u'response. Duplicate key types are not allowed. If no key type is ' |
| u'provided, all keys are returned.', |
| flag_values=fv) |
| |
| def RunWithArgs(self, name): |
| """Lists ServiceAccountKeys. |
| |
| Args: |
| name: The resource name of the service account in the following format: |
| `projects/{project}/serviceAccounts/{account}`. Using `-` as a |
| wildcard for the project, will infer the project from the account. The |
| `account` value can be the `email` address or the `unique_id` of the |
| service account. |
| |
| Flags: |
| keyTypes: Filters the types of keys the user wants to include in the |
| list response. Duplicate key types are not allowed. If no key type is |
| provided, all keys are returned. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.IamProjectsServiceAccountsKeysListRequest( |
| name=name.decode('utf8'), |
| ) |
| if FLAGS['keyTypes'].present: |
| request.keyTypes = [messages.IamProjectsServiceAccountsKeysListRequest.KeyTypesValueValuesEnum(x) for x in FLAGS.keyTypes] |
| result = client.projects_serviceAccounts_keys.List( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| class RolesQueryGrantableRoles(apitools_base_cli.NewCmd): |
| """Command wrapping roles.QueryGrantableRoles.""" |
| |
| usage = """roles_queryGrantableRoles""" |
| |
| def __init__(self, name, fv): |
| super(RolesQueryGrantableRoles, self).__init__(name, fv) |
| flags.DEFINE_string( |
| 'fullResourceName', |
| None, |
| u'Required. The full resource name to query from the list of ' |
| u'grantable roles. The name follows the Google Cloud Platform ' |
| u'resource format. For example, a Cloud Platform project with id `my-' |
| u'project` will be named ' |
| u'`//cloudresourcemanager.googleapis.com/projects/my-project`.', |
| flag_values=fv) |
| |
| def RunWithArgs(self): |
| """Queries roles that can be granted on a particular resource. |
| |
| Flags: |
| fullResourceName: Required. The full resource name to query from the |
| list of grantable roles. The name follows the Google Cloud Platform |
| resource format. For example, a Cloud Platform project with id `my- |
| project` will be named `//cloudresourcemanager.googleapis.com/projects |
| /my-project`. |
| """ |
| client = GetClientFromFlags() |
| global_params = GetGlobalParamsFromFlags() |
| request = messages.QueryGrantableRolesRequest( |
| ) |
| if FLAGS['fullResourceName'].present: |
| request.fullResourceName = FLAGS.fullResourceName.decode('utf8') |
| result = client.roles.QueryGrantableRoles( |
| request, global_params=global_params) |
| print apitools_base_cli.FormatOutput(result) |
| |
| |
| def main(_): |
| appcommands.AddCmd('pyshell', PyShell) |
| appcommands.AddCmd('iamPolicies_getPolicyDetails', IamPoliciesGetPolicyDetails) |
| appcommands.AddCmd('projects_serviceAccounts_create', ProjectsServiceAccountsCreate) |
| appcommands.AddCmd('projects_serviceAccounts_delete', ProjectsServiceAccountsDelete) |
| appcommands.AddCmd('projects_serviceAccounts_get', ProjectsServiceAccountsGet) |
| appcommands.AddCmd('projects_serviceAccounts_getIamPolicy', ProjectsServiceAccountsGetIamPolicy) |
| appcommands.AddCmd('projects_serviceAccounts_list', ProjectsServiceAccountsList) |
| appcommands.AddCmd('projects_serviceAccounts_setIamPolicy', ProjectsServiceAccountsSetIamPolicy) |
| appcommands.AddCmd('projects_serviceAccounts_signBlob', ProjectsServiceAccountsSignBlob) |
| appcommands.AddCmd('projects_serviceAccounts_signJwt', ProjectsServiceAccountsSignJwt) |
| appcommands.AddCmd('projects_serviceAccounts_testIamPermissions', ProjectsServiceAccountsTestIamPermissions) |
| appcommands.AddCmd('projects_serviceAccounts_update', ProjectsServiceAccountsUpdate) |
| appcommands.AddCmd('projects_serviceAccounts_keys_create', ProjectsServiceAccountsKeysCreate) |
| appcommands.AddCmd('projects_serviceAccounts_keys_delete', ProjectsServiceAccountsKeysDelete) |
| appcommands.AddCmd('projects_serviceAccounts_keys_get', ProjectsServiceAccountsKeysGet) |
| appcommands.AddCmd('projects_serviceAccounts_keys_list', ProjectsServiceAccountsKeysList) |
| appcommands.AddCmd('roles_queryGrantableRoles', RolesQueryGrantableRoles) |
| |
| apitools_base_cli.SetupLogger() |
| if hasattr(appcommands, 'SetDefaultCommand'): |
| appcommands.SetDefaultCommand('pyshell') |
| |
| |
| run_main = apitools_base_cli.run_main |
| |
| if __name__ == '__main__': |
| appcommands.Run() |
