fwddlZddlZddlZddlZddlmZmZmZmZm Z ddl m Z m Z m Z mZmZmZmZmZddlmZddlmZddlmZddlmZmZmZddlmZdd lm Z d Z!d Z"d Z#d Z$d Z%dZ&dZ'dZ(dZ)dZ*dZ+dddddZ,e jZZ.ej^ej`e1Z2ejfGddejhZ5Gdde jlZ7de8fdZ9 d9dedee:efdee:efd e;d!e;d"df d#Z< d:ded$ee:efd%ee:efd e;d!e;d"e ee;ff d&Z=d'ej|d"ej~fd(Z@d)ZAded"eefd*ZBded+e:d"ee:effd,ZCded"e;fd-ZDd.ee:e:fd/ee:e:fd"eEfd0ZF d;d1ee:efd2e:d3e:d4ee:d"eeEee:efff d5ZG ds D FGr+r!c eZdZdZej ejgd ddZde e e ffdZ de de e e ffd Z ej ejgdd ejfd Z dd e d e dee dede e e ff dZdZde de e e ffdZde e e ffdZde fdZ dd e de dee de e e ffdZ dd e de dee de fdZdZy)UAContractClient contract_url)rrr) retry_sleepsNcN|stj|j}|j}|j ddj |i|j }|j|d<||d}t|}|jt||}|jdk(rtj|jdk(r t||jdk7r0tjt|j|j |j"S) a}Requests machine attach to the provided machine_id. @param contract_token: Token string providing authentication to ContractBearer service endpoint. @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. @return: Dict of the JSON response containing the machine-token. Authorization Bearer {}lastAttachment machineId activityInfo)dataheadersiurlcodebody)r get_machine_idcfgr9updateformat_get_activity_info isoformat_support_old_machine_info request_urlAPI_V1_ADD_CONTRACT_MACHINEr>r AttachInvalidTokenError_raise_attach_forbidden_messageContractAPIErrorr? json_dict) selfcontract_token attachment_dt machine_idr9 activity_infor8backcompat_dataresponses r,add_contract_machinez%UAContractClient.add_contract_machineJs..txx8J,,.););N)KLM//1 *7*A*A*C &''G3D9## 'ow$  ==C 446 6 ]]c ! +H 5 ==C --/]]]]  !!!r+returnc|j}|jt|d|d|d|dd}|jdk7r0t j t|j|j |jS) z=Requests list of entitlements available to this machine type. architecturerkernelvirtrWrrXrY) query_paramsr;r<)rDrGAPI_V1_AVAILABLE_RESOURCESr>r rKr?rL)rMrQrSs r,available_resourcesz$UAContractClient.available_resourcesps//1 ## & -n ='1'1%f- $  ==C --.]]]]  !!!r+rNc*|j}|jddj|i|jt|}|j dk7r0t jt|j |j|jS)Nr2r3r9r;r<) r9rBrCrGAPI_V1_GET_CONTRACT_USING_TOKENr>r rKr?rL)rMrNr9rSs r,get_contract_using_tokenz)UAContractClient.get_contract_using_tokens,,.););N)KLM## +W$  ==C --3]]]]  !!!r+instancec|jtj|j|j}|j dk7ry|j jdd}|r+tj|tj|tjt|j |j|jjd|j |j S) zRequests contract token for auto-attach images for Pro clouds. @param instance: AutoAttachCloudInstance for the cloud. @return: Dict of the JSON response containing the contract-token. ) cloud_type)r8r;message) error_msgr<zcontract-token)rG,API_V1_GET_CONTRACT_TOKEN_FOR_CLOUD_INSTANCErCrd identity_docr>rLgetLOGdebugr InvalidProImagerKr?rA write_cache)rMrbrSmsgs r,%get_contract_token_for_cloud_instancez6UAContractClient.get_contract_token_for_cloud_instances## 8 ? ?#.. @ && $  ==C $$((B7C # 003??--@]]]]  -x/A/AB!!!r+ machine_tokenresourcerP save_filecn|stj|j}|j}|j ddj |it j ||}|j||}|jdk7r0tjt |j|j|jjdr|jd|jd<|r5|jjdj ||j|jS) aRequests machine access context for a given resource @param machine_token: The authentication token needed to talk to this contract service endpoint. @param resource: Entitlement name. @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. @save_file: If the machine access should be saved on the user machine @return: Dict of the JSON response containing entitlement accessInfo. r2r3)rrmachiner_r;r<expireszmachine-access-{})r r@rAr9rBrC"API_V1_GET_RESOURCE_MACHINE_ACCESSrGr>r rKr?rjrLrn)rMrqrrrPrsr9r=rSs r,get_resource_machine_accessz,UAContractClient.get_resource_machine_accesss $..txx8J,,.););M)JKL077z8 ##C#9 ==C --6]]]]       *,4,<,r rKr?rLwrite)rMr~rqrP request_datar=r9rSs r,update_activity_tokenz&UAContractClient.update_activity_tokens& hh11== ..22>B **4884 ..0 *11 *2 ,,.););M)JKL##C|#L ==C --hmm(--     HH22M-5,>,>M. ) HH ' ' - -m < r+ magic_tokenc|j}|jddj|i|jt|}|j dk(rt j|j dk(rt j|j dk7r0t jt|j |j|jS)zRequest magic attach token info. When the magic token is registered, it will contain new fields that will allow us to know that the attach process can proceed r2r3r_r:r;r<) r9rBrCrG"API_V1_GET_MAGIC_ATTACH_TOKEN_INFOr>r MagicAttachTokenErrorMagicAttachUnavailablerKr?rLrMrr9rSs r,get_magic_attach_token_infoz,UAContractClient.get_magic_attach_token_infos ,,.););K)HIJ## .$  ==C 224 4 ==C 335 5 ==C --6]]]]  !!!r+c.|j}|jt|d}|jdk(rt j |jdk7r0t j t|j|j|jS)z)Create a magic attach token for the user.POSTr9methodrr;r<) r9rGAPI_V1_NEW_MAGIC_ATTACHr>r rrKr?rL)rMr9rSs r,new_magic_attach_tokenz'UAContractClient.new_magic_attach_tokens,,.## #$  ==C 335 5 ==C --+]]]]  !!!r+c|j}|jddj|i|jt|d}|j dk(rt j|j dk(rt j|j dk(rt j|j dk7r0t jt|j |j y ) z)Revoke a magic attach token for the user.r2r3DELETErir:rr;r<N) r9rBrCrGAPI_V1_REVOKE_MAGIC_ATTACHr>r MagicAttachTokenAlreadyActivatedrrrKr?rs r,revoke_magic_attach_tokenz*UAContractClient.revoke_magic_attach_token+s,,.););K)HIJ## &$  ==C ==? ? ==C 224 4 ==C 335 5 ==C --.]]]]  r+r~c >|stj|j}|j}|j ddj |it j ||}|j}|j|d||d|d|d|dd  }|jd k7r,tj||j|j |jjd r|jd |jd <|jS)a|Get the updated machine token from the contract server. @param machine_token: The machine token needed to talk to this contract service endpoint. @param contract_id: Unique contract id provided by contract service @param machine_id: Optional unique system machine id. When absent, contents of /etc/machine-id will be used. r2r3r{GETrWrrXrYrZ)rr9r[r;r<rv)r r@rAr9rBrCAPI_V1_GET_CONTRACT_MACHINErDrGr>r rKr?rjrL)rMrqr~rPr9r=rQrSs r,get_contract_machinez%UAContractClient.get_contract_machineBs..txx8J,,.););M)JKL)00 1 //1 ##  -n ='1'1%f-  $   ==C --hmm(--       *,4,<,r rKr?rjrL) rMrqr~rPr9r8rRr=rSs r,update_contract_machinez(UAContractClient.update_contract_machinems  ..txx8J,,.););M)JKL# 335 4D9,33 *4 ## o$  ==C --hmm(--       *,4,<,M6:x001  55,xAAB   U   ((  MM! K  " "4 ( II=     MM! #   " "4 ( MMG    " s@C##C2 F#F(# C/.C/2F ?E  F ?FF rrc<ddlm}|r t|tj||}d}|r|j dij d}|s!|j dij d}|st j|||j dij dij d d } |||| } | ||} | j|||}||fS#t j$r} tjd || d } ~ wwxYw)a,Process a entitlement access dictionary deltas if they exist. :param cfg: UAConfig instance :param orig_access: Dict with original entitlement access details before contract refresh deltas :param new_access: Dict with updated entitlement access details after contract refresh :param allow_enable: Boolean set True if allowed to perform the enable operation. When False, a message will be logged to inform the user about the recommended enabled service. :param series_overrides: Boolean set True if series overrides should be applied to the new_access dict. :raise UbuntuProError: on failure to process deltas. :return: A tuple containing a dict of processed deltas and a boolean indicating if the service was fully processed r)entitlement_factoryF entitlementr)orignew entitlements obligations use_selectorrf)rArrz3Skipping entitlement deltas for "%s". No such classN)rA assume_yesr) rrapply_contract_overridesrget_dict_deltasrjr InvalidContractDeltasServiceTypeEntitlementNotFoundErrorrkrlprocess_contract_deltas) rArrrrrrretrrent_clsexcrs r,rr*s&0: ,  ! !+z :F C }b155f=::mR044V2 . S # S $   )cgNG#,? 11 l2  3;22  IIEt I  s> C++D>DDrSc|jjd}|r|d}|d}|dk(rB|djt}t j |||djd|dk(rB|djt}t j |||djd |d k(rt j| t j) Ninfo contractIdreasonzno-longer-effectivetimez%m-%d-%Y)r~datecontract_expiry_dateznot-effective-yet)r~rcontract_effective_dateznever-effective)r~) rLrjstrftimerr AttachForbiddenExpiredAttachForbiddenNotYetAttachForbiddenNeverAttachExpiredToken)rSrr~rrs r,rJrJfs    ! !& )D <( h * *<(()@AD33'%)&\%:%::%F   * *<(()@AD22'(,V (=(=j(I   ( (11kJ J  ' ' ))r+c|jj}|j}|d}|ddd}t|}|j ||}|jj |t jj|jdijdt j|}|jd|t|||jjd y ) aRequest contract refresh from ua-contracts service. :param cfg: Instance of UAConfig for this machine. :raise UbuntuProError: on failure to update contract or error processing contract deltas :raise ConnectivityError: On failure during a connection rzmachineTokenInfo contractInfoid)rqr~r6z machine-idFrN) r}rrqr.rrr r@ cache_clearrjrnr)rAorig_entitlements orig_tokenrqr~contract_clientresprPs r,refreshr s..;;""J~.M/0@FK&s+O  2 2# 3 D  & %%',b155V**3/JOOL*-  ++ r+c\t|}|j}|jdgS)zDQuery available resources from the contract server for this machine.r)r.r]rj)rAclientrs r,get_available_resourcesrs+ c "F**,I ==b ))r+tokenc:t|}|j|S)z/Query contract information for a specific token)r.ra)rArrs r,get_contract_informationrs c "F  * *5 11r+c|j}|jj}|jdd}|jdijdijdd}|syt |}|j ||}|jdijdijdd}|r|n|jj }|jj |k7ry|jj|} t| jD]/\} } tj|j| i| } | s/yy) NrzrfrrrF effectiveToT) rqr}rrjr.rcontract_expiry_datetimeget_entitlements_from_tokensorteditemsrr) rAr rrqr~r r  resp_expiry new_expirycurr_entitlementsrrrs r,is_contract_changedrsO""J..;;NN>26M)2. ^R T4 &s+O  / / { KD #R( ^R ]D !    # # < <  66*D..JJ "((9(?(?(A!Bo%%  ! !$ +_    r+override_selectorselector_valuesc~d}|jD]'\}}||f|jvry|t|z })|S)Nr)rOVERRIDE_SELECTOR_WEIGHTS)rroverride_weightselectorvalues r,_get_override_weightr$sVO,224?% e O$9$9$; ;4X>>? r+r series_namerdrc i}||d}|r||d<|jdij|i}|r ||td<tj|j dg}|D]%}t |jd|} | s!||| <'|S)N)rrrrr overridesr")popr copydeepcopyrjr$) rr%rdrr'rrgeneral_overridesoverrideweights r,_select_overridesr.s I!,zBO%, ""x488bI   %&8 9  kook2&FG%)% LL $o   (If  ) r+rcddlm}tt|td|vgst dj ||tjjn|}|\}}|jdi}t||||}t|jD][\} } | jD]C\} } |dj| } t| tr| j| <| |d| <E]y)aApply series-specific overrides to an entitlement dict. This function mutates orig_access dict by applying any series-overrides to the top-level keys under 'entitlement'. The series-overrides are sparse and intended to supplement existing top-level dict values. So, sub-keys under the top-level directives, obligations and affordance sub-key values will be preserved if unspecified in series-overrides. To more clearly indicate that orig_access in memory has already had the overrides applied, the 'series' key is also removed from the orig_access dict. :param orig_access: Dict with original entitlement access details r)get_cloud_typerz?Expected entitlement access dict. Missing "entitlement" key: {}N)uaclient.clouds.identityr0all isinstancedict RuntimeErrorrCr rrrjr.rrrB)rrrr0r%rd_orig_entitlementr'_weightoverrides_to_applykeyr#currents r,rrs &8  ;-} /KL M &%  -3N!((#$MJ"}b9!+z7I(.ioo.?'@ 8##,224 8JC!-044S9G'4(u%38 M*3/ 8 8r+ct|jstjdfSt}t }|j j}|(tjdtj| fSd|cxkr|krnntj|fS| |cxkrdkrnntj|fS|| krtj|fStj|fS)z/Return a tuple [ContractExpiryStatus, num_days]rz:contract effectiveTo date is null - assuming it is expired)rrr!r%rrr}contract_remaining_daysrkwarningr)r'r(r&)rA grace_periodpending_expiryremaining_dayss r,get_contract_expiry_statusrB2s   ( (#((!++4L1N++CCN H $++l]::N,n,#77GG . ,1 ,#88.HH <- '#++^;;  & & 66r+)T)FTr)NN)Jr)enumloggingrtypingrrrrruaclientrr r r r r rr-uaclient.api.u.pro.status.enabled_services.v1r(uaclient.api.u.pro.status.is_attached.v1ruaclient.configruaclient.defaultsrrruaclient.files.state_filesr uaclient.httprrHrrr\rwrhrr`rrrr get_event_loggerr getLoggerreplace_top_level_logger_namer"rkuniqueEnumr!UAServiceClientr.r4rFrrrr HTTPResponse NamedMessagerJr rrrintr$r.rrBr*r+r,rVs8  33   LA$ <';9:-9#0O,9#1%7",/   & %%'g:::8DE499 r }44r j D@" P P CH~P 38nP  P  P  P n! 9 9c3h9S#X9 9  9  4: 9x** *:D**d4j*2(2324S>2 #X#$#L CH~ 8!!.8c3h.8 SM.8c].8 .8b7 7  $%7r+