d9VSrSSKJr SSKJr SSKJr SSSSS .rS0S jrS1S jrS2S jr S1Sjr Sr Sr S2Sjr SrSrSrSrSrS3SjrSrSrSrSrSrS4SjrSrSrS rS!rS"rS#rS$r S%r!S&r"S'r#S(r$S)r%S*r&S+r'S,r(S-r)S.r*S/r+g )5z'Command line flags for Anthos commands.) arg_parsers)base)fileszpperform a structural comparison of the original/updated Resources, and merge the changes into the local package.zMfail without updating if the local package was modified since it was fetched.zuse 'git format-patch' and 'git am' to apply a patch of the changes between the source version and destination version. Requires the local package to have been committed to a local git repo.zThis will wipe all local changes to the package. Deletes the contents of local package from PACKAGE_DIR and replace them with the remote )zresource-mergez fast-forwardzalpha-git-patchzforce-delete-replacec URSS5R5nU(aUnURSS5 O/SRURSS5R 55nU(dX2S'[ R "U40UD6$)z9Return argument called name as either flag or positional.-_requiredNz--{}dest)replaceupperpopformatlowerrArgument)name positionalkwargsr flags .lib/googlecloudsdk/command_lib/anthos/flags.pyGetFlagOrPositionalr&sq c3  % % '$ D JJz4 ==c3/557 8D 6N t &v &&NcDU=(d SnU(dSn[SUUUUS9$)zGet REPO_URI flag.a Git repository URI containing 1 or more packages as where: * REPO_URI - URI of a git repository containing 1 or more packages as subdirectories. In most cases the .git suffix should be specified to delimit the REPO_URI from the PKG_PATH, but this is not required for widely recognized repo prefixes. If REPO_URI cannot be parsed then an error will be printed an asking for '.git' to be specified as part of the argument. e.g. https://github.com/kubernetes/examples.git * PKG_PATH (optional) - Path to Git subdirectory containing Anthos package files. Uses '/' as the path separator (regardless of OS). e.g. staging/cockroachdb. Defaults to the root directory. * GIT_REF (optional)- A git tag, branch, ref or commit for the remote version of the package to fetch. Defaults to the repository default branch e.g. @main z#REPO_URI[.git]/[PKG_PATH][@GIT_REF]repo_urirrr helpmetavarrrr help_overriderhelp_txts rGetRepoURIFlagr!3s9 (" 3G     rc[SSSSUS9$)N package_pathFz Path to remote subdirectory containing Kubernetes Resource configuration files or directories. Defaults to the root directory. Uses '/' as the path separator (regardless of OS). e.g. staging/cockroachdb rr)rs rGetPackagePathFlagr$Ss"     rc <U=(d Sn[SUU[UUS9$)z!Get Local Package directory flag.a The local directory to fetch the package to. e.g. ./my-cockroachdb-copy * If the directory does NOT exist: create the specified directory and write the package contents to it * If the directory DOES exist: create a NEW directory under the specified one, defaulting the name to the Base of REPO/PKG_PATH * If the directory DOES exist and already contains a directory with the same name of the one that would be created: fail LOCAL_DIR)rrr typerrrExpandLocalDirAndVersionrs rGetLocalDirFlagr*bs4    (   #   rc[SSSSS9$)NpatternFz Pattern to use for writing files. May contain the following formatting verbs %n: metadata.name, %s: metadata.namespace, %k: kind (default "%n_%k.yaml") )rrr rrrrGetFilePatternFlagr.|s     rc8[R"SS[SS9$)Nz --strategyFz6Controls how changes to the local package are handled.)r choicesr)rr_MERGE_STRATEGIESr-rrGetStrategyFlagr2s!  C  EErcFU=(d Sn[R"SSSUS9$)Nz]If true and command fails print the underlying command that was executed and its exit status.z --dry-run store_trueFactionr rrr)rr s r GetDryRunFlagr8s/ 3 2( ,X GGrc.[R"SSSS9$)Nz --descriptionFzDescription of the Package.r rr7r-rrGetDescriptionFlagr;s ,I KKrc.[R"SSSS9$)Nz--nameFzName of the package.r:r7r-rr GetNameFlagr=s x%6L MMrcX[R"SS[R"5SSS9$)Nz--tagsFz TAG=VALUEzTags for the package.)r r'rr)rrrArgDictr-rr GetTagsFlagr@s+      "  $$rc.[R"SSSS9$)Nz --info-urlFz%Url with more info about the package.r:r7r-rrGetInfoUrlFlagrBs  2 44rcU(aURS5OSn[R"US5n[U5S:Xa USUS-- nU$)zExpand HOME relative (~) directory with optional git_ref. Args: directory: str, directory path in the format PATH[/][@git_ref]. Returns: str, expanded full directory path with git_ref (if provided) @r)splitr ExpandHomeDirlen) directorypathfull_dirs rr)r)sL"+ $  a )(Y!^ d1g H /rc2U=(d Sn[SUUUUS9$)z#Anthos operation cluster name flag.zpCluster to authenticate against. If no cluster is specified, the command will print a list of available options.CLUSTERrrrs rGetClusterFlagrPs1 8 7(     rc.[R"SSSS9$)Nz--login-configFzMSpecifies the configuration yaml file for login. Can be a file path or a URL.r:r7r-rrGetLoginConfigFlagrRs  5 66rc8[R"SS[SS9$)Nz--login-config-certFzuSpecifies the CA certificate file to be added to trusted pool for making HTTPS connections to a `--login-config` URL.r r'rrrr)r-rrGetLoginConfigCertFlagrVs$  # @  AArc.[R"SSSS9$)N--userFzyIf configuring multiple user accounts in the same kubecconfig file, you can specify a user to differentiate between them.r:r7r-rr GetUserFlagrYs!  D EErc0[R"SSSSS9$)Nz--set-preferred-authFr4zCIf set, forces update of preferred authentication for given cluster)r r6rr7r-rr!GetSetPreferredAuthenticationFlagr[s!   )  **rc.[R"SSSS9$)Nz--serverFzGSpecifies the URL of API server of the cluster to authenticate against.r:r7r-rr GetServerFlagr]s    rc >U=(d Sn[SUU[UUUS9$)z-Anthos operation local output directory flag.z[The output directory of the cluster resources. If empty will export files to ./CLUSTER_NAMEOUTPUT_DIRECTORY)rrr r'rdefaultrr()rr rrr`r s rGetOutputDirFlagras7 P O(   #  rc.[R"SSSS9$)zAnthos location flag.z --locationFzgSpecifies the Google Cloud location to use. If notspecified will use the current compute/zone property.r:r7r-rrGetLocationFlagrcs  > ??rc.[R"SSSS9$)z+Anthos create-login-config Merge-From flag.z --merge-fromFzNSpecifies the file path of an existing login configuration file to merge with.r:r7r-rrGetMergeFromFlagres  * ++rc8[R"SS[SS9$)z'Anthos create-login-config output flag.z--outputFzXDestination to write login configuration file. Defaults to "kubectl-anthos-config.yaml".rTrUr-rrGetConfigOutputFileFlagrg$s!  # 2  33rc4[R"SSSS/SS9$)zGAnthos auth token type flag, specifies the type of token to be created.z--typeTawsoidczType of token to be created.)r r0help_str)rChoiceArgumentr-rr GetTypeFlagrm/s%  fo-  //rc.[R"SSSS9$)zhAnthos auth token aws-sts-region flag, specifies the region for AWS STS endpoint for creating AWS token.z--aws-sts-regionFzRegion for AWS STS endpoint.r:r7r-rrGetAwsStsRegionFlagro8s 5/M OOrc.[R"SSSS9$)zNAnthos auth token cluster flag, specifies cluster name for creating AWS token.z --clusterFz/Name of the cluster for which token is created.r:r7r-rrGetTokenClusterFlagrq>s  < >>rc.[R"SSSS9$)zqAnthos auth token id-token flag, specifies the ID Token received from identity provider after authorization flow.z --id-tokenFzBID Token received from identity provider after authorization flow.r:r7r-rrGetIdTokenFlagrsFs  O QQrc.[R"SSSS9$)zyAnthos auth token access-token flag, specifies the Access Token received from identity provider after authorization flow.z--access-tokenFzFAccess Token received from identity provider after authorization flow.r:r7r-rrGetAccessTokenFlagruNs    rc.[R"SSSS9$)zAnthos auth token access-token-expiry flag, specifies the Expiration time of access token received from identity provider after authorization flow.z--access-token-expiryFzExpiration time of access token received from identity provider after authorization flow. The expected format is the number of seconds elapsed since January 1, 1970 UTC.r:r7r-rrGetAccessTokenExpiryFlagrwZs  8  rc.[R"SSSS9$)z{Anthos auth token refresh-token flag, specifies the Refresh Token received from identity provider after authorization flow.z--refresh-tokenFzGRefresh Token received from identity provider after authorization flow.r:r7r-rrGetRefreshTokenFlagrygs    rc.[R"SSSS9$)z_Anthos auth token client-id flag, specifies the ClientID is the id for OIDC client application.z --client-idFz/ClientID is the id for OIDC client application.r:r7r-rrGetClientIdFlagr{ss  < >>rc.[R"SSSS9$)zAnthos auth token client-secret flag, specifies the Client Secret is the shared secret between OIDC client application and OIDC provider.z--client-secretFzUClient Secret is the shared secret between OIDC client application and OIDC provider.r:r7r-rrGetClientSecretFlagr}{s   rc.[R"SSSS9$)zAnthos auth token idp-certificate-authority-data flag, specifies the PEM-encoded certificate authority certificate for OIDC provider.z --idp-certificate-authority-dataFz@PEM-encoded certificate authority certificate for OIDC provider.r:r7r-rr"GetIdpCertificateAuthorityDataFlagrs ( M OOrc.[R"SSSS9$)zOAnthos auth token idp-issuer-url flag, specifies the URI for the OIDC provider.z--idp-issuer-urlFzeURI for the OIDC provider. This URI should point to the level below .well-known/openid-configuration.r:r7r-rrGetIdpIssuerUrlFlagrs  /  rc.[R"SSSS9$)zAnthos auth token kubeconfig-path flag, specifies the Path to the kubeconfig path that would be updated with ID and access token on expiry.z--kubeconfig-pathFzUPath to the kubeconfig path that would be updated with ID and access token on expiry.r:r7r-rrGetKubeconfigPathFlagrs    rc.[R"SSSS9$)zCAnthos auth token user flag, specifies the User used in kubeconfig.rXFzUser used in kubeconfig.r:r7r-rrGetTokenUserFlagrs %? rc0[R"SSSSS9$)zuUsed to start authentication on a device without a browser in order to perform login on a second device with browser.z --no-browserr4Fz^Option to indicate login completion on a second device with browser.Used with `server` option.r5r7r-rrGetNoBrowserFlagrs!   '  rc.[R"SSSS9$)z|Used to complete authentication that was started on a remote device without a browser, on the current device with a browser.z--remote-bootstrapFzsOption to complete login that was started using `no-browser` optionon a remote device that does not have a browser.r:r7r-rrGetRemoteBootstrapFlagrs  =  r)F)TTNN)N)FFNN)FFNz OUTPUT-DIRN),__doc__googlecloudsdk.callioperrgooglecloudsdk.core.utilrr1rr!r$r*r.r2r8r;r=r@rBr)rPrRrVrYr[r]rarcrergrmrorqrsrurwryr{r}rrrrrrr-rrrs1.0(*1.CM  '# !%@  $!"& 4  EGK N$4$$!!%  6AE*!&##')! $?+3/O >Q   > O    r