Ë
    eQêj~  ã                   ó\  — d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl	Z	d dl
mZ d dlZd dlZd dlZd dlmZ d dlmZmZ d dlmZ ddlmZ ddlmZmZmZ 	 d dlZd dlZd	Z  ejD                  d¬«      Z#ejH                  jK                  dd«      Z& ejN                  «       dk(  rdndZ(i a)d„ Z*d&d„Z+d„ Z, G d„ d«      Z- G d„ d«      Z. G d„ d«      Z/ G d„ d«      Z0 G d„ d«      Z1	 d'd„Z2	 	 	 d(d „Z3d)d!„Z4	 	 	 	 d*d"„Z5	 	 	 	 d+d#„Z6	 	 	 	 d+d$„Z7	 	 	 	 	 d,d%„Z8y# e!$ r d
Z Y ŒÀw xY w)-é    N)Ú
namedtuple)ÚOAuth2Session)Ú	ApiClientÚConfiguration)ÚExecProvideré   )ÚConfigException)ÚUTCÚformat_rfc3339Úparse_rfc3339TFé   )ÚminutesÚ
KUBECONFIGz~/.kube/configÚWindowsú;ú:c                  ó„   — t         j                  «       D ]  } 	 t        j                  | «       Œ i a y # t        $ r Y Œ)w xY w©N)Ú_temp_filesÚvaluesÚosÚremoveÚOSError)Ú	temp_files    úb/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/kubernetes/config/kube_config.pyÚ_cleanup_temp_filesr   5   sF   € ä ×'Ñ'Ó)ò ˆ	ð	Ü�I‰I�iÕ ðð
 �Køô ò 	Ùð	ús   ™3³	?¾?c                 ó  — t        t        «      dk(  rt        j                  t        «       t        | «      }|s|t        v r	t        |   S |r5t        j                  j                  |«      st        j                  |¬«       t        j                  |¬«      \  }}t        j                  |«       |t        |<   t        |d«      5 }|j                  t        | t
        «      r| j!                  «       n| «       d d d «       |S # 1 sw Y   |S xY w)Nr   )Úname)ÚdirÚwb)Úlenr   ÚatexitÚregisterr   Ústrr   ÚpathÚisdirÚmakedirsÚtempfileÚmkstempÚcloseÚopenÚwriteÚ
isinstanceÚencode)ÚcontentÚtemp_file_pathÚforce_recreateÚcontent_keyÚfdr   s         r   Ú_create_temp_file_with_contentr4   ?   sÊ   € Ü
Œ;Ó˜1ÒÜ�‰Ô+Ô,ô �g“,€KÙ˜k¬[Ñ8Ü˜;Ñ'Ð'ÙœbŸg™gŸm™m¨NÔ;Ü
�‰˜Õ(Ü×Ñ NÔ3�H€BˆÜ‡H�HˆR„LØ#„K�ÑÜ	ˆd�DÓ	ð L˜RØ
�‰¤Z°¼Ô%=�—‘Ô!À7ÔK÷Là€K÷Là€Kús   Ã2D Ä D
c                 óp   — t        | «      t        z
  t        j                  j                  t        ¬«      k  S )N©Útz)r   ÚEXPIRY_SKEW_PREVENTION_DELAYÚdatetimeÚnowr
   )Úexpirys    r   Ú_is_expiredr<   Q   s1   € Ü˜6Ó"Ô%AÑAÜ×Ñ×!Ñ!¤SÐ!Ó)ñ*ð +ó    c                   ó2   — e Zd ZdZ	 	 	 dd„Zd„ Zd„ Zdd„Zy)	Ú
FileOrDataaC  Utility class to read content of obj[%data_key_name] or file's
     content of obj[%file_key_name] and represent it as file or data.
     Note that the data is preferred. The obj[%file_key_name] will be used iff
     obj['%data_key_name'] is not set or empty. Assumption is file content is
     raw data and data field is base64 string. The assumption can be changed
     with base64_file_content flag. If set to False, the content of the file
     will assumed to be base64 and read as is. The default True value will
     result in base64 encode of the file content after read.Nc                 ó  — |s|dz   }d | _         d | _        || _        || _        |sy ||v r||   | _        y ||v rFt        j
                  j                  t        j
                  j                  |||   «      «      | _         y y )Nz-data)Ú_fileÚ_dataÚ_base64_file_contentÚ_temp_file_pathr   r%   ÚnormpathÚjoin)ÚselfÚobjÚfile_key_nameÚdata_key_nameÚfile_base_pathÚbase64_file_contentr0   s          r   Ú__init__zFileOrData.__init__`   s„   € ñ Ø)¨GÑ3ˆMØˆŒ
ØˆŒ
Ø$7ˆÔ!Ø-ˆÔÙØØ˜CÑØ˜]Ñ+ˆD�JØ˜cÑ!ÜŸ™×)Ñ)Ü—‘—‘˜^¨S°Ñ-?Ó@óBˆD�Jð "r=   c                 óœ  — | j                    xr | j                  }|rW| j                  «        | j                   r;t        j                  j                  | j                   «      s| j                  d¬«       | j                   rAt        j                  j                  | j                   «      st        d| j                   z  «      ‚| j                   S )z‹If obj[%data_key_name] exists, return name of a file with base64
        decoded obj[%data_key_name] content otherwise obj[%file_key_name].T)Úforce_rewritezFile does not exist: %s)rA   rB   Ú_write_filer   r%   Úisfiler	   )rG   Úuse_data_if_no_files     r   Úas_filezFileOrData.as_fileq   sŒ   € ð #'§*¡*˜nÒ;°·±ÐÙØ×ÑÔà�zŠz¤"§'¡'§.¡.°·±Ô"<Ø× Ñ ¨tÐ Ô4Ø�:Š:œbŸg™gŸn™n¨T¯Z©ZÔ8Ü!Ð";¸d¿j¹jÑ"HÓIÐIØ�z‰zÐr=   c           	      ó¶  — | j                    xr | j                  }|ršt        | j                  «      5 }| j                  rOt        j                  t        j                  t        j                  |j                  «       «      «      «      | _         n|j                  «       | _         ddd«       | j                   S | j                   S # 1 sw Y   | j                   S xY w)z†If obj[%data_key_name] exists, Return obj[%data_key_name] otherwise
        base64 encoded string of obj[%file_key_name] file content.N)rB   rA   r+   rC   ÚbytesÚdecodeÚbase64Ústandard_b64encoder$   r.   Úread)rG   Úuse_file_if_no_dataÚfs      r   Úas_datazFileOrData.as_data~   s¡   € ð #'§*¡*˜nÒ;°·±ÐÙÜ�d—j‘jÓ!ð * QØ×,Ò,Ü!&§¡Ü×1Ñ1´#·*±*¸Q¿V¹V»XÓ2FÓGó"I�D•Jð "#§¡£�D”J÷*ð �z‰zÐˆt�z‰zÐ÷*ð �z‰zÐús   ³A1CÃCc                 óN  — | j                   rrt        | j                  t        «      r| j                  j	                  «       }n| j                  }t        t        j                  |«      | j                  |¬«      | _	        y t        | j                  | j                  |¬«      | _	        y )N)r1   )
rC   r-   rB   r$   r.   r4   rW   Ústandard_b64decoderD   rA   )rG   rO   r/   s      r   rP   zFileOrData._write_file‹   sz   € Ø×$Ò$Ü˜$Ÿ*™*¤cÔ*ØŸ*™*×+Ñ+Ó-‘àŸ*™*�Ü7Ü×)Ñ)¨'Ó2°D×4HÑ4HÐYfôhˆD�Jô 8Ø—
‘
˜D×0Ñ0ÀôPˆD�Jr=   )NÚ TN©F)Ú__name__Ú
__module__Ú__qualname__Ú__doc__rM   rS   r\   rP   © r=   r   r?   r?   V   s)   „ ñ@ð :>Ø8<Ø $óBò"òô
Pr=   r?   c                   ó   — e Zd Zd„ Zd„ Zy)ÚCommandTokenSourcec                 ód   — || _         || _        |sd| _        n|| _        |sd| _        y || _        y )Nz{.access_token}z{.token_expiry})Ú_cmdÚ_argsÚ	_tokenKeyÚ
_expiryKey)rG   ÚcmdÚargsÚtokenKeyÚ	expiryKeys        r   rM   zCommandTokenSource.__init__™   s2   € ØˆŒ	ØˆŒ
ÙØ.ˆD�Nà%ˆDŒNÙØ/ˆD�Oà'ˆD�Or=   c                 ój  — | j                   dz   dj                  | j                  «      z   }t        j                  | j                   g| j                  z   t        j
                  t        j
                  d¬«      }|j                  «       \  }}|j                  «       }|dk7  r2d|z  }|d|z  z  }|j                  «       }|r|d|z  z  }t        |«      ‚	 t        j                  |«      }t        d	d
dg«      }	 |	|d   d   t        |d   d   «      ¬«      S # t        $ r}t        d|z  «      ‚d }~ww xY w)Nú T)ÚstdoutÚstderrÚuniversal_newlinesr   zcmd-path: process returned %dz
Cmd: %sz
Stderr: %sz)exec: failed to decode process output: %sÚAÚtokenr;   Ú
credentialÚaccess_tokenÚtoken_expiry)rw   r;   )ri   rF   rj   Ú
subprocessÚPopenÚPIPEÚcommunicateÚwaitÚstripr	   ÚjsonÚloadsÚ
ValueErrorr   r   )
rG   ÚfullCmdÚprocessrs   rt   Ú	exit_codeÚmsgÚdataÚderv   s
             r   rw   zCommandTokenSource.token¥   s=  € Ø—)‘)˜sÑ# c§h¡h¨t¯z©zÓ&:Ñ:ˆÜ×"Ñ"Ø�Y‰YˆK˜$Ÿ*™*Ñ$Ü—?‘?Ü—?‘?Ø#ô	%ˆð
 #×.Ñ.Ó0Ñˆ�Ø—L‘L“Nˆ	Ø˜Š>Ø1°IÑ=ˆCØ�; Ñ(Ñ(ˆCØ—\‘\“^ˆFÙØ�~¨Ñ.Ñ.�Ü! #Ó&Ð&ð	BÜ—:‘:˜fÓ%ˆDô �s˜W hÐ/Ó0ˆÙØ�|Ñ$ ^Ñ4Ü   lÑ!3°NÑ!CÓDôFð 	Føô	 ò 	BÜ!Ø;¸bÑ@óBð Bûð	Bús   ÃD Ä	D2ÄD-Ä-D2N)ra   rb   rc   rM   rw   re   r=   r   rg   rg   ˜   s   „ ò
(óFr=   rg   c                   óŠ   — e Zd Z	 	 	 	 	 dd„Zdd„Zd„ Zd„ Zd„ Zd„ Zd„ Z	d	„ Z
d
„ Zd„ Zd„ Zd„ Zd„ Zd„ Zd„ Zd„ Zed„ «       Zy)ÚKubeConfigLoaderNc                 ó"  ‡ ‡— |€t        d«      ‚t        |t        «      r|‰ _        nt        d|«      ‰ _        d ‰ _        d ‰ _        d ‰ _        ‰ j                  |«       |‰ _        |‰ _	        |‰ _
        ˆ fd„Šˆˆ fd„}|r|‰ _        y |‰ _        y )Nz9Invalid kube-config. Expected config_dict to not be None.zkube-configc                  óx  •— ‰j                   d   d   } | d   }t        |«      dk(  rt        d«      ‚d| v r| d   dk7  rt        d«      ‚g }d	| v r| d	   j                  «       }n| d   j                  «       }|d   }|d
d  }t	        ||| j                  d«      | j                  d«      «      }|j                  «       S )Núauth-providerÚconfigúcmd-pathr   zNmissing access token cmd (cmd-path is an empty string in your kubeconfig file)Úscopesr_   zGscopes can only be used when kubectl is using a gcp service account keyzcmd-argsr   z	token-keyz
expiry-key)Ú_userr!   r	   Úsplitrg   Úsafe_getrw   )r�   rm   rn   ÚfieldsÚcommandTokenSourcerG   s        €r   Ú"_refresh_credentials_with_cmd_pathzEKubeConfigLoader.__init__.<locals>._refresh_credentials_with_cmd_pathÙ   sí   ø€ Ø—Z‘Z Ñ0°Ñ:ˆFØ˜Ñ$ˆCÜ�3‹x˜1Š}Ü%ðLóMð Mð ˜6Ñ! f¨XÑ&6¸"Ò&<Ü%ðFóGð Gð ˆDØ˜VÑ#Ø˜jÑ)×/Ñ/Ó1‘à 
Ñ+×1Ñ1Ó3�Ø˜Q‘i�Ø˜a˜b�z�ä!3Ø�TØ—‘ Ó,Ø—‘ Ó-ó"/Ðð &×+Ñ+Ó-Ð-r=   c                  óZ  •— d‰j                   v r,d‰j                   d   v rd‰j                   d   d   v r ‰«       S t        rjt        j                  j	                  ddg¬«      \  } }t        j                  j
                  j                  j                  «       }| j                  |«       | S y )NrŽ   r�   r�   z.https://www.googleapis.com/auth/cloud-platformz.https://www.googleapis.com/auth/userinfo.email)r‘   )	r’   Úgoogle_auth_availableÚgoogleÚauthÚdefaultÚ	transportÚrequestsÚRequestÚrefresh)ÚcredentialsÚ
project_idÚrequestr—   rG   s      €€r   Ú_refresh_credentialsz7KubeConfigLoader.__init__.<locals>._refresh_credentialsò   s£   ø€ à 4§:¡:Ñ-Ø˜DŸJ™J Ñ7Ñ7Ø $§*¡*¨_Ñ"=¸hÑ"GÑGÙ9Ó;Ð;õ %Ü*0¯+©+×*=Ñ*=ØDØDðFÐ*=ó +Ñ'�˜Zô !Ÿ+™+×/Ñ/×8Ñ8×@Ñ@ÓB�Ø×#Ñ# GÔ,Ø"Ð"àr=   )r	   r-   Ú
ConfigNodeÚ_configÚ_current_contextr’   Ú_clusterÚset_active_contextÚ_config_base_pathÚ_config_persisterrD   Ú_get_google_credentials)	rG   Úconfig_dictÚactive_contextÚget_google_credentialsÚconfig_base_pathÚconfig_persisterr0   r¤   r—   s	   `       @r   rM   zKubeConfigLoader.__init__Â   s™   ù€ ð ÐÜ!ð7ó8ð 8ô ˜¤ZÔ0Ø&ˆD�Lä% m°[ÓAˆDŒLà $ˆÔØˆŒ
ØˆŒØ×Ñ Ô/Ø!1ˆÔØ!1ˆÔØ-ˆÔô	.õ2	ñ& "Ø+AˆDÕ(à+?ˆDÕ(r=   c                 óâ  — |€| j                   d   }| j                   d   j                  |«      | _        | j                  d   j                  d«      r`| j                   j                  d«      rE| j                   d   j                  | j                  d   d   d¬«      }|r|d   | _        nd | _        nd | _        | j                   d   j                  | j                  d   d	   «      d	   | _        y )
Núcurrent-contextÚcontextsÚcontextÚuserÚusersT)ÚsafeÚclustersÚcluster)r¦   Úget_with_namer§   r”   r’   r¨   )rG   Úcontext_namer¶   s      r   r©   z#KubeConfigLoader.set_active_context
  sè   € ØÐØŸ<™<Ð(9Ñ:ˆLØ $§¡¨ZÑ 8× FÑ FØó!ˆÔà×!Ñ! )Ñ,×5Ñ5°fÔ=Ø—‘×%Ñ% gÔ.Ø—<‘< Ñ(×6Ñ6Ø×%Ñ% iÑ0°Ñ8¸tð 7ó EˆDáØ! &™\�•
à!�•
àˆDŒJØŸ™ ZÑ0×>Ñ>Ø×!Ñ! )Ñ,¨YÑ7ó9Ø9BñDˆ�r=   c                 ó¤   — | j                   sy| j                  «       ry| j                  «       ry| j                  «       ry| j	                  «        y)a½  Read authentication from kube-config user section if exists.

        This function goes through various authentication methods in user
        section of kube-config and stops if it finds a valid authentication
        method. The order of authentication methods is:

            1. auth-provider (gcp, azure, oidc)
            2. token field (point to a token file)
            3. exec provided plugin
            4. username/password
        N)r’   Ú_load_auth_provider_tokenÚ_load_user_tokenÚ_load_from_exec_pluginÚ_load_user_pass_token©rG   s    r   Ú_load_authenticationz%KubeConfigLoader._load_authentication  sG   € ð �zŠzØØ×)Ñ)Ô+ØØ× Ñ Ô"ØØ×&Ñ&Ô(ØØ×"Ñ"Õ$r=   c                 ó®   — d| j                   vry | j                   d   }d|vry |d   dk(  r| j                  |«      S |d   dk(  r| j                  |«      S y )NrŽ   r   ÚgcpÚoidc)r’   Ú_load_gcp_tokenÚ_load_oid_token©rG   Úproviders     r   r¾   z*KubeConfigLoader._load_auth_provider_token2  sk   € Ø $§*¡*Ñ,ØØ—:‘:˜oÑ.ˆØ˜Ñ!ØØ�FÑ˜uÒ$Ø×'Ñ'¨Ó1Ð1Ø�FÑ˜vÒ%Ø×'Ñ'¨Ó1Ð1ð &r=   c                 óÚ   — d|vsd|d   vsd|d   v r!t        |d   d   «      r| j                  «        d|d   d   z  | _        d|d   v rt        |d   d   «      | _        | j                  S )Nr�   úaccess-tokenr;   ú	Bearer %s)r<   Ú_refresh_gcp_tokenrw   r   r;   rÉ   s     r   rÇ   z KubeConfigLoader._load_gcp_token?  s…   € Ø˜XÑ%Ø x°Ñ'9Ñ9Ø˜X hÑ/Ñ/Ü˜X hÑ/°Ñ9Ô:à×#Ñ#Ô%à  8¨HÑ#5°nÑ#EÑEˆŒ
Ø�x Ñ)Ñ)Ü'¨°Ñ(:¸8Ñ(DÓEˆDŒKØ�z‰zÐr=   c                 óR  — d| j                   d   vri | j                   d   j                  d<   | j                   d   d   }| j                  «       }|j                  |j                  d<   t	        |j
                  «      |j                  d<   | j                  r| j                  «        y y )Nr�   rŽ   rÌ   r;   )r’   Úvaluer¬   rw   r   r;   r«   )rG   rÊ   r¡   s      r   rÎ   z#KubeConfigLoader._refresh_gcp_tokenL  s”   € Ø˜4Ÿ:™: oÑ6Ñ6Ø:<ˆD�J‰J�Ñ'×-Ñ-¨hÑ7Ø—:‘:˜oÑ.¨xÑ8ˆØ×2Ñ2Ó4ˆØ)4×):Ñ):ˆ�‰�~Ñ&Ü#1°+×2DÑ2DÓ#Eˆ�‰�xÑ Ø×!Ò!Ø×"Ñ"Õ$ð "r=   c                 ó|  ‡— d|vry t        g d¢«      }|d   d   Št        ˆfd„|D «       «      ry ‰j                  d«      }t        |«      dk7  ry dt        |d   «      dz  z
  d	z  }t        |«      dk(  ry t	        j
                  t        j                  |d   |z   «      j                  d
«      «      }|j                  d«      }|�[t        t        j                  j                  |t        ¬«      «      r-| j                  |«       | j                  r| j                  «        d|d   d   z  | _        | j                   S )Nr�   )ú=ú+ú/úid-tokenc              3   ó&   •K  — | ]  }|‰v –— Œ
 y ­wr   re   )Ú.0Úcharrw   s     €r   ú	<genexpr>z3KubeConfigLoader._load_oid_token.<locals>.<genexpr>]  s   øè ø€ Ò= ˆt�uŒ}Ñ=ùs   ƒú.é   é   r   rÒ   úutf-8Úexpr6   rÍ   )Ú	frozensetÚanyr“   r!   r�   r‚   rW   Úurlsafe_b64decoderV   Úgetr<   r9   Úfromtimestampr
   Ú_refresh_oidcr«   rw   )rG   rÊ   Úreserved_charactersÚpartsÚpaddingÚjwt_attributesÚexpirerw   s          @r   rÈ   z KubeConfigLoader._load_oid_tokenV  s5  ø€ Ø˜8Ñ#Øä'ªÓ8ÐØ˜Ñ" :Ñ.ˆäÓ=Ð)<Ô=Ô=àà—‘˜CÓ ˆÜˆu‹:˜Š?Øà”s˜5 ™8“} qÑ(Ñ(¨CÑ/ˆÜˆw‹<˜1Òð äŸ™Ü×$Ñ$ U¨1¡X°Ñ%7Ó8×?Ñ?ÀÓHó
ˆð  ×#Ñ# EÓ*ˆàÐÜœ×*Ñ*×8Ñ8¸Ü<?ð 9ó Aô Bà×Ñ˜xÔ(à×%Ò%Ø×&Ñ&Ô(à  8¨HÑ#5°jÑ#AÑAˆŒ
à�z‰zÐr=   c                 óH  — t        «       }d|d   v r;t        j                  |d   d   «      j                  d«      }t	        |«      |_        nd|d   v r|d   d   |_        nd|_        t        |¬«      }|j                  dd|d   d	   z  ¬
«      }|j                  «        |j                  dk7  ry t        j                  |j                  «      }t        |d   d   |d   d   |d   d   |d   d   dœ|d   ¬«      }	 |j                  |d   |d   d   |d   d   |d   d   f|j                  r|j
                  nd ¬«      }|d   |d   j*                  d<   |d   |d   j*                  d<   y # t         j"                  j$                  j&                  j(                  $ r Y y w xY w)Nzidp-certificate-authority-datar�   rÝ   zidp-certificate-authorityF©ÚconfigurationÚGETz#%s/.well-known/openid-configurationzidp-issuer-url)ÚmethodÚurléÈ   z	client-idzrefresh-tokenzclient-secret)Ú	client_idÚclient_secretÚtoken_endpoint)rñ   rw   Úauto_refresh_kwargsÚauto_refresh_url)Ú	token_urlÚrefresh_tokenr›   ÚverifyÚid_tokenrÕ   r÷   )r   rW   Ú	b64decoderV   r4   Ússl_ca_certÚ
verify_sslr   Úcall_apirY   Ústatusr�   r‚   rˆ   r   r÷   ÚoauthlibÚoauth2Úrfc6749ÚerrorsÚInvalidClientIdErrorrÐ   )rG   rÊ   r�   ÚcertÚclientÚresponser£   r    s           r   rä   zKubeConfigLoader._refresh_oidc~  sì  € Ü“ˆà+¨x¸Ñ/AÑAÜ×#Ñ#Ø˜Ñ"Ð#CÑDóç‰f�W‹oð ô "@ÀÓ!EˆFÕà(¨H°XÑ,>Ñ>Ø!)¨(Ñ!3Ð4OÑ!PˆFÕð !&ˆFÔä¨Ô0ˆà—?‘?ØØ5Ø�xÑ Ð!1Ñ2ñ3ð #ó 
ˆð
 	�‰Œà�?‰?˜cÒ!Øä—:‘:˜hŸm™mÓ,ˆäØ˜xÑ(¨Ñ5Ø˜8Ñ$ _Ñ5à% hÑ/°Ñ<Ø!)¨(Ñ!3°OÑ!Dñ!ð &Ð&6Ñ7ô
ˆð		Ø×+Ñ+Ø"Ð#3Ñ4Ø& xÑ0°ÑAØ˜xÑ(¨Ñ5Ø˜xÑ(¨Ñ9ð;à-3×->Ò->�v×)Ò)ÀDð ,ó ˆGð 07°zÑ/Bˆ�Ñ× Ñ  Ñ,Ø4;¸OÑ4Lˆ�Ñ× Ñ  Ò1øô	 �‰×&Ñ&×-Ñ-×BÑBò 	Ùð	ús   Ã>AE- Å-1F!Æ F!c                 ó®  — d| j                   vry 	 | j                  | j                  j                  «      }t	        | j                   d   || j                  «      j                  «       }d|v rd|d   z  | _        n‘d|v rwd|vrt        j                  d«       y t        |d d|d| j                  ¬«      j                  «       | _        t        |d d|d| j                  ¬«      j                  «       | _        nt        j                  d	«       y d
|v rt        |d
   «      | _        y# t         $ r(}t        j                  t#        |«      «       Y d }~y d }~ww xY w)NÚexecrw   rÍ   ÚclientCertificateDataÚclientKeyDataz2exec: missing clientKeyData field in plugin outputF)rJ   rK   rL   r0   zCexec: missing token or clientCertificateData field in plugin outputÚexpirationTimestampT)r’   Ú_get_base_pathr¨   r%   r   Úrunrw   ÚloggingÚerrorr?   rD   rS   Ú	cert_fileÚkey_filer   r;   Ú	Exceptionr$   )rG   Ú	base_pathrþ   Úes       r   rÀ   z'KubeConfigLoader._load_from_exec_plugin·  sJ  € Ø˜Ÿ™Ñ#Øð 	"Ø×+Ñ+¨D¯M©M×,>Ñ,>Ó?ˆIÜ! $§*¡*¨VÑ"4°iÀÇÁÓO×SÑSÓUˆFØ˜&Ñ Ø(¨6°'©?Ñ:�•
Ø(¨FÑ2ð #¨&Ñ0Ü—M‘Mð #2ô 3àÜ!+Ø˜DØ"9Ø#,Ø(-Ø#'×#7Ñ#7ô"9÷
 :A¹»ð ”ô !+Ø˜DØ"1Ø#,Ø(-Ø#'×#7Ñ#7ô!9÷
 :A¹»ð •ô —‘ð 7ô 8àØ$¨Ñ.Ü+¨FÐ3HÑ,IÓJ�”ØøÜò 	"Ü�M‰Mœ#˜a›&×!Ñ!ûð	"ús%   ‘BD# ÂA2D# ÄD# Ä#	EÄ,EÅEc                 óÎ   — | j                  | j                  j                  «      }t        | j                  dd|d| j                  ¬«      j                  «       }|rd|z  | _        yy )NÚ	tokenFilerw   F)rK   rL   r0   rÍ   T)r  r’   r%   r?   rD   r\   rw   )rG   r  rw   s      r   r¿   z!KubeConfigLoader._load_user_tokenÜ  sc   € Ø×'Ñ'¨¯
©
¯©Ó8ˆ	ÜØ�J‰J˜ WØ$Ø %Ø×/Ñ/ô	1÷ 29±³ð	 	ñ
 Ø$ uÑ,ˆDŒJØð r=   c                 óè   — d| j                   v rdd| j                   v rUt        j                  j                  | j                   d   dz   | j                   d   z   ¬«      j	                  d«      | _        yy y )NÚusernameÚpasswordr   )Ú
basic_authÚauthorizationT)r’   Úurllib3ÚutilÚmake_headersrâ   rw   rÂ   s    r   rÁ   z&KubeConfigLoader._load_user_pass_tokenç  sq   € Ø˜Ÿ™Ñ#¨
°d·j±jÑ(@Ü Ÿ™×2Ñ2Ø ŸJ™J zÑ2°SÑ8Ø ŸJ™J zÑ2ñ3ð 3ó 5ç58±S¸Ó5Ið ŒJð ð	 )AÐ#r=   c                 ó°   — | j                   �| j                   S |�<t        j                  j                  t        j                  j	                  |«      «      S y)Nr_   )rª   r   r%   ÚabspathÚdirname)rG   Úconfig_paths     r   r  zKubeConfigLoader._get_base_pathî  sC   € Ø×!Ñ!Ð-Ø×)Ñ)Ð)ØÐ"Ü—7‘7—?‘?¤2§7¡7§?¡?°;Ó#?Ó@Ð@Ør=   c                 ó  — d| j                   v �r| j                   d   j                  d«      | _        | j                  j                  d«      rÕ| j	                  | j                   j
                  «      }t        | j                   d|| j                  ¬«      j                  «       | _	        d| j                  vrlt        | j                  d|| j                  ¬«      j                  «       | _        t        | j                  d|| j                  ¬«      j                  «       | _        d	| j                   v r| j                   d	    | _        d
| j                   v r| j                   d
   | _        d| j                   v r| j                   d   | _        y y )NÚserverrÔ   Úhttpszcertificate-authority)rK   r0   r  zclient-certificatez
client-keyzinsecure-skip-tls-verifyztls-server-namez	proxy-url)r¨   ÚrstripÚhostÚ
startswithr  r%   r?   rD   rS   rû   Ú__dict__r’   r  r  rü   Útls_server_nameÚproxy)rG   r  s     r   Ú_load_cluster_infoz#KubeConfigLoader._load_cluster_infoõ  sU  € Ø�t—}‘}Ò$ØŸ™ hÑ/×6Ñ6°sÓ;ˆDŒIØ�y‰y×#Ñ# GÔ,Ø ×/Ñ/°·±×0BÑ0BÓC�	Ü#-Ø—M‘MÐ#:Ø#,Ø#'×#7Ñ#7ô$9÷ :A¹»ð Ô ð  d§m¡mÑ3ô &0ØŸ
™
Ð$8Ø'0Ø'+×';Ñ';ô&=÷ >E¹W»Yð ”Nô %/ØŸ
™
 LØ'0Ø'+×';Ñ';ô%=÷ >E¹W»Yð ”Mð &¨¯©Ñ6Ø"&§-¡-Ð0JÑ"KÐKˆDŒOØ §¡Ñ-Ø#'§=¡=Ð1BÑ#CˆDÔ Ø˜$Ÿ-™-Ñ'ØŸ™ {Ñ3ˆD�Jð (r=   c           	      óÎ   ‡ — d‰ j                   v r%‰ j                  |j                  d<   ˆ fd„}||_        g d¢}|D ](  }|‰ j                   v sŒt	        ||t        ‰ |«      «       Œ* y )Nrw   ÚBearerTokenc                 óŽ   •— d‰j                   v r%t        ‰j                  «      r‰j                  «        ‰j	                  | «       y )Nr;   )r)  r<   r;   rÃ   Ú_set_config)Úclient_configurationrG   s    €r   Ú_refresh_api_keyz6KubeConfigLoader._set_config.<locals>._refresh_api_key  s5   ø€ Ø §¡Ñ-´+¸d¿k¹kÔ2JØ×-Ñ-Ô/Ø× Ñ Ð!5Õ6r=   )r'  rû   r  r  rü   r*  r+  )r)  rw   Úapi_keyÚrefresh_api_key_hookÚsetattrÚgetattr)rG   r1  r2  ÚkeysÚkeys   `    r   r0  zKubeConfigLoader._set_config  sm   ø€ Ø�d—m‘mÑ#Ø:>¿*¹*Ð ×(Ñ(¨Ñ7ô7ð 9IÐ Ô5ò,ˆàò 	GˆCØ�d—m‘mÒ#ÜÐ,¨c´7¸4ÀÓ3EÕFñ	Gr=   c                 óf   — | j                  «        | j                  «        | j                  |«       y r   )rÃ   r,  r0  )rG   r1  s     r   Úload_and_setzKubeConfigLoader.load_and_set!  s)   € Ø×!Ñ!Ô#Ø×ÑÔ!Ø×ÑÐ-Õ.r=   c                 óZ   — | j                   d   D �cg c]  }|j                  ‘Œ c}S c c}w )Nr´   )r¦   rÐ   )rG   rµ   s     r   Úlist_contextszKubeConfigLoader.list_contexts&  s#   € Ø-1¯\©\¸*Ñ-EÖF '�—“ÒFÐFùÒFs   ’(c                 ó.   — | j                   j                  S r   )r§   rÐ   rÂ   s    r   Úcurrent_contextz KubeConfigLoader.current_context)  s   € à×$Ñ$×*Ñ*Ð*r=   )NNr_   NNr   )ra   rb   rc   rM   r©   rÃ   r¾   rÇ   rÎ   rÈ   rä   rÀ   r¿   rÁ   r  r,  r0  r:  r<  Úpropertyr>  re   r=   r   r‹   r‹   À   s   „ à37Ø(,Ø"$Ø"&Ø $ó	F@óPDò$%ò,	2òò%ò&òP7Mòr#"òJ	òòò4ò8Gò /ò
Gð ñ+ó ñ+r=   r‹   c                   ó8   — e Zd ZdZd	d„Zd„ Zd„ Zd„ Zd„ Zd
d„Z	y)r¥   z¸Remembers each config key's path and construct a relevant exception
    message in case of missing keys. The assumption is all access keys are
    present in a well-formed kube-config.Nc                 ó.   — || _         || _        || _        y r   )r   rÐ   r%   )rG   r   rÐ   r%   s       r   rM   zConfigNode.__init__3  s   € ØˆŒ	ØˆŒ
Øˆ�	r=   c                 ó   — || j                   v S r   )rÐ   ©rG   r8  s     r   Ú__contains__zConfigNode.__contains__8  s   € Ø�d—j‘jÐ Ð r=   c                 ó,   — t        | j                  «      S r   )r!   rÐ   rÂ   s    r   Ú__len__zConfigNode.__len__;  s   € Ü�4—:‘:‹Ðr=   c                 ó’   — t        | j                  t        «      rt        |t        «      s|| j                  v r| j                  |   S y r   )r-   rÐ   ÚlistÚintrC  s     r   r”   zConfigNode.safe_get>  s8   € Ü�t—z‘z¤4Ô(¬Z¸¼SÔ-AØ�t—z‘zÑ!Ø—:‘:˜c‘?Ð"ð "r=   c                 óî   — | j                  |«      }|€t        d|›d| j                  ›�«      ‚t        |t        «      st        |t
        «      r&t        | j                  ›d|›�|| j                  «      S |S )Nz'Invalid kube-config file. Expected key ú in rÔ   )r”   r	   r   r-   ÚdictrH  r¥   r%   )rG   r8  Úvs      r   Ú__getitem__zConfigNode.__getitem__C  sf   € Ø�M‰M˜#ÓˆØˆ9Ý!â˜Ÿ	š	ð#ó$ð $ô �aœÔ¤*¨Q´Ô"5Ü¨¯«±CÐ8¸!¸T¿Y¹YÓGÐGàˆHr=   c                 óÊ  — t        | j                  t        «      st        d| j                  z  «      ‚d }| j                  D ]G  }d|vrt        d| j                  z  «      ‚|d   |k(  sŒ(|€|}Œ-t        d|›d| j                  ›d�«      ‚ |�9t        |t
        «      r|S t        | j                  ›d|›d�|| j                  «      S |ry t        d	|›d| j                  ›d�«      ‚)
Nz2Invalid kube-config file. Expected %s to be a listr   zKInvalid kube-config file. Expected all values in %s list to have 'name' keyz=Invalid kube-config file. Expected only one object with name rK  z listz[name=ú]z4Invalid kube-config file. Expected object with name )r-   rÐ   rH  r	   r   r¥   r%   )rG   r   r¸   ÚresultrM  s        r   r»   zConfigNode.get_with_nameN  s  € Ü˜$Ÿ*™*¤dÔ+Ü!ØDØ—)‘)ñóð ð ˆØ—‘ò 	-ˆAØ˜Q‰Ü%ðJà—i‘iñ ó!ð !ð �‰y˜DÓ Ø�>Ø‘Få)ò   §£ð,ó-ð -ð	-ð ÐÜ˜&¤*Ô-Ø�ä!à—Y“Y¢ð&Ø'-¨t¯y©yó:ð :ñ ØÝâ9=¸t¿y»yðJóKð 	Kr=   r   r`   )
ra   rb   rc   rd   rM   rD  rF  r”   rN  r»   re   r=   r   r¥   r¥   .  s&   „ ñ-óò
!òò#ò
	ôKr=   r¥   c                   óJ   — e Zd ZdZd„ Zed„ «       Zd„ Zd„ Zd„ Z	d„ Z
d„ Zd	„ Zy
)ÚKubeConfigMergeraˆ  Reads and merges configuration from one or more kube-config's.
    The property `config` can be passed to the KubeConfigLoader as config_dict.

    It uses a path attribute from ConfigNode to store the path to kubeconfig.
    This path is required to load certs from relative paths.

    A method `save_changes` updates changed kubeconfig's (it compares current
    state of dicts with).
    c                 óŒ   — g | _         i | _        d | _        t        |d«      r| j	                  |«       y | j                  |«       y )NrY   )ÚpathsÚconfig_filesÚconfig_mergedÚhasattrÚ"_load_config_from_file_like_objectÚ_load_config_from_file_path)rG   rU  s     r   rM   zKubeConfigMerger.__init__|  s?   € ØˆŒ
ØˆÔØ!ˆÔÜ�5˜&Ô!Ø×3Ñ3°EÕ:à×,Ñ,¨UÕ3r=   c                 ó   — | j                   S r   )rW  rÂ   s    r   r�   zKubeConfigMerger.config…  s   € à×!Ñ!Ð!r=   c                 ó  — t        |d«      r$t        j                  |j                  «       «      }n#t        j                  |j	                  «       «      }|€t        d«      ‚| j                  €t        j                  |«      | _        y y )NÚgetvaluezInvalid kube-config.)	rX  ÚyamlÚ	safe_loadr]  rY   r	   rW  ÚcopyÚdeepcopy)rG   Ústringr�   s      r   rY  z3KubeConfigMerger._load_config_from_file_like_object‰  sl   € Ü�6˜:Ô&Ü—^‘^ F§O¡OÓ$5Ó6‰Fä—^‘^ F§K¡K£MÓ2ˆFàˆ>Ü!Ø&ó(ð (à×ÑÐ%Ü!%§¡¨vÓ!6ˆDÕð &r=   c                 ó\  — |j                  t        «      D ]p  }|sŒt        j                  j	                  |«      }t        j                  j                  |«      sŒE| j                  j                  |«       | j                  |«       Œr t        j                  | j                  «      | _        y r   )r“   ÚENV_KUBECONFIG_PATH_SEPARATORr   r%   Ú
expanduserÚexistsrU  ÚappendÚload_configr`  ra  rV  Úconfig_saved)rG   rb  r%   s      r   rZ  z,KubeConfigMerger._load_config_from_file_path–  s{   € Ø—L‘LÔ!>Ó?ò 	+ˆDÚÜ—w‘w×)Ñ)¨$Ó/�Ü—7‘7—>‘> $Õ'Ø—J‘J×%Ñ% dÔ+Ø×$Ñ$ TÕ*ð	+ô !ŸM™M¨$×*;Ñ*;Ó<ˆÕr=   c                 óÆ  — t        |«      5 }t        j                  |«      }d d d «       €t        d|z  «      ‚| j                  €3t        j                  |«      }dD ]  }g ||<   Œ	 t        |||«      | _        dD ])  }| j                  ||j                  |g «      xs g |«       Œ+ d|v r|d   | j                  j                  d<   || j                  |<   y # 1 sw Y   Œ¶xY w)Nz%Invalid kube-config. %s file is empty)r¹   r´   r·   r³   )r+   r^  r_  r	   rW  r`  ra  r¥   Ú_mergerâ   rÐ   rV  )rG   r%   r[   r�   rW  Úitems         r   rh  zKubeConfigMerger.load_configŸ  sý   € Ü�$‹Zð 	'˜1Ü—^‘^ AÓ&ˆF÷	'ð ˆ>Ü!ð#Ø%)ñ*ó+ð +ð ×ÑÐ%Ü ŸM™M¨&Ó1ˆMØ9ò )�Ø&(�˜dÒ#ð)ä!+¨D°-ÀÓ!FˆDÔØ5ò 	@ˆDØ�K‰K˜˜fŸj™j¨¨rÓ2Ò8°b¸$Õ?ð	@ð  Ñ&Ø:@ÐARÑ:SˆD×Ñ×$Ñ$Ð%6Ñ7à"(ˆ×Ñ˜$Ò÷'	'ð 	'ús   ŒCÃC c           	      óî   — |D ]p  }| j                   j                  |   D ]  }|d   |d   k(  sŒ Œ- | j                   j                  |   j                  t        dj	                  ||«      ||«      «       Œr y )Nr   z{}/{})rW  rÐ   rg  r¥   Úformat)rG   rl  Úadd_cfgr%   Únew_itemrf  s         r   rk  zKubeConfigMerger._mergeµ  s…   € Øò 	EˆHØ×,Ñ,×2Ñ2°4Ñ8ò E�Ø˜&‘> X¨fÑ%5Ó5ÙðEð ×"Ñ"×(Ñ(¨Ñ.×5Ñ5´jØ—N‘N 4¨Ó2°H¸dó7Dõ Eñ	Er=   c                 óÐ   — | j                   D ]3  }| j                  |   | j                  |   k7  sŒ#| j                  |«       Œ5 t	        j
                  | j                  «      | _        y r   )rU  ri  rV  Úsave_configr`  ra  )rG   r%   s     r   Úsave_changeszKubeConfigMerger.save_changes¾  sZ   € Ø—J‘Jò 	'ˆDØ× Ñ  Ñ&¨$×*;Ñ*;¸DÑ*AÓAØ× Ñ  Õ&ð	'ô !ŸM™M¨$×*;Ñ*;Ó<ˆÕr=   c                 ó�   — t        |d«      5 }t        j                  | j                  |   |d¬«       d d d «       y # 1 sw Y   y xY w)NÚwF)Údefault_flow_style)r+   r^  Ú	safe_dumprV  )rG   r%   r[   s      r   rr  zKubeConfigMerger.save_configÄ  s@   € Ü�$˜‹_ð 	5 Ü�N‰N˜4×,Ñ,¨TÑ2°AØ.3õ5÷	5÷ 	5ñ 	5ús	   �&<¼AN)ra   rb   rc   rd   rM   r?  r�   rY  rZ  rh  rk  rs  rr  re   r=   r   rS  rS  p  s?   „ ñò4ð ñ"ó ð"ò
7ò=ò)ò,Eò=ó5r=   rS  c                 ó   — t        d| |dœ|¤ŽS )N)ÚfilenameÚpersist_configre   )Ú_get_kube_config_loader)ry  rz  Úkwargss      r   Ú%_get_kube_config_loader_for_yaml_filer}  Ê  s$   € ä"ð ØØ%ñð ñð r=   c                 óÀ   — |€Ot        | «      }|rd|vr|j                  |d<   |j                  €t        d«      ‚t	        d|j                  d dœ|¤ŽS t	        d|d dœ|¤ŽS )Nr±   z1Invalid kube-config file. No configuration found.)r­   r°   re   )rS  rs  r�   r	   r‹   )ry  r­   rz  r|  Úkcfgs        r   r{  r{  Ò  s˜   € ð
 ÐÜ Ó)ˆÙÐ0¸Ñ>Ø)-×):Ñ):ˆFÐ%Ñ&à�;‰;ÐÜ!ð*ó+ð +ô  ð ØŸ™Ø!ñð ñð 	ô
  ð Ø#Ø!ñð ñð 	r=   c                 ób   — | €t         } t        | ¬«      }|j                  «       |j                  fS )N)ry  )ÚKUBE_CONFIG_DEFAULT_LOCATIONr{  r<  r>  )Úconfig_fileÚloaders     r   Úlist_kube_config_contextsr„  ë  s1   € àÐÜ2ˆä$¨kÔ:€FØ×ÑÓ! 6×#9Ñ#9Ð9Ð9r=   c                 óØ   — | €t         } t        | |||¬«      }|€@t        j                  t        «      }|j                  |«       t	        j                  |«       y|j                  |«       y)a,  Loads authentication and cluster information from kube-config file
    and stores them in kubernetes.client.configuration.

    :param config_file: Name of the kube-config file.
    :param context: set the active context. If is set to None, current_context
        from config file will be used.
    :param client_configuration: The kubernetes.client.Configuration to
        set configs to.
    :param persist_config: If True, config file will be updated when changed
        (e.g GCP token refresh).
    :param temp_file_path: store temp files path.
    N)ry  r®   rz  r0   )r�  r{  ÚtypeÚ__call__r   r:  Úset_default)r‚  rµ   r1  rz  r0   rƒ  r�   s          r   Úload_kube_configr‰  ô  se   € ð" ÐÜ2ˆä$Ø¨WØ%Ø%ô'€Fð
 Ð#Ü—‘œ}Ó-ˆØ×Ñ˜FÔ#Ü×!Ñ! &Õ)à×ÑÐ0Õ1r=   c                 óâ   — | €t        d«      ‚t        | |||¬«      }|€@t        j                  t        «      }|j                  |«       t	        j                  |«       y|j                  |«       y)a/  Loads authentication and cluster information from config_dict file
    and stores them in kubernetes.client.configuration.

    :param config_dict: Takes the config file as a dict.
    :param context: set the active context. If is set to None, current_context
        from config file will be used.
    :param client_configuration: The kubernetes.client.Configuration to
        set configs to.
    :param persist_config: If True, config file will be updated when changed
        (e.g GCP token refresh).
    :param temp_file_path: store temp files path.
    Nz1Invalid kube-config dict. No configuration found.)r­   r®   rz  r0   )r	   r{  r†  r‡  r   r:  rˆ  )r­   rµ   r1  rz  r0   rƒ  r�   s          r   Úload_kube_config_from_dictr‹    st   € ð  ÐÜð&ó'ð 	'ô %Ø°Ø%Ø%ô'€Fð
 Ð#Ü—‘œ}Ó-ˆØ×Ñ˜FÔ#Ü×!Ñ! &Õ)à×ÑÐ0Õ1r=   c                 ón   — |€t         j                  t        «      }t        | |||¬«       t	        |¬«      S )zÃ
    Loads configuration the same as load_kube_config but returns an ApiClient
    to be used with any API object. This will allow the caller to concurrently
    talk with multiple clusters.
    )r‚  rµ   r1  rz  rë   )r†  r‡  r   r‰  r   )r‚  rµ   rz  r1  s       r   Únew_client_from_configr�  7  s9   € ð Ð#Ü#Ÿ}™}¬]Ó;ÐÜ °gØ*>Ø$2õ4ô Ð#7Ô8Ð8r=   c                 óp   — |€t         j                  t        «      }t        | ||||¬«       t	        |¬«      S )zÍ
    Loads configuration the same as load_kube_config_from_dict but returns an ApiClient
    to be used with any API object. This will allow the caller to concurrently
    talk with multiple clusters.
    )r­   rµ   r1  rz  r0   rë   )r†  r‡  r   r‹  r   )r­   rµ   rz  r0   r1  s        r   Únew_client_from_config_dictr�  I  s<   € ð Ð#Ü#Ÿ}™}¬]Ó;ÐÜ¨;ÀØ4HØ.<Ø.<õ>ô Ð#7Ô8Ð8r=   )NFr`   )NNFr   )NNNTN)NNTN)NNTNN)9r"   rW   r`  r9   r�   r  r   Úplatformr{   r(   Úcollectionsr   Úoauthlib.oauth2rÿ   r  r^  Úrequests_oauthlibr   Úkubernetes.clientr   r   Úkubernetes.config.exec_providerr   Úconfig_exceptionr	   Údateutilr
   r   r   Úgoogle.authrš   Úgoogle.auth.transport.requestsr™   ÚImportErrorÚ	timedeltar8   Úenvironrâ   r�  Úsystemrd  r   r   r4   r<   r?   rg   r‹   r¥   rS  r}  r{  r„  r‰  r‹  r�  r�  re   r=   r   ú<module>rž     st  ðó Û Û Û Û Û Û 	Û Û Û Ý "ã Û Û Ý +ç 6Ý 8å -ß 8Ñ 8ð"ÛÛ)Ø Ðð  2˜x×1Ñ1¸!Ô<Ð Ø!Ÿz™zŸ~™~¨lÐ<LÓMÐ Ø'6 x§¡Ó'8¸IÒ'E¡È3Ð Ø€òóò$+÷
?Pñ ?P÷D%Fñ %F÷Pk+ñ k+÷\?Kñ ?K÷DW5ñ W5ðv "'óð ØØóó2:ð 04Ø*.Ø$(Ø$(ó2ðB 59Ø48Ø.2Ø.2ó2ðF ØØØ!ó	9ð& ØØØØ!ô9øð ò "Ø!Òð"ús   Á 
D! Ä!D+Ä*D+