|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/sos/report/plugins/__pycache__/ |
Upload File : |
o
-�_g� � @ sb d dl Z d dlmZ d dlmZ d dlmZ d dlmZ d dl m
Z
m Z m Z G dd� de
e �Z
dS ) � N)� HTTPResponse)�Any)�request)�URLError)�Plugin�IndependentPlugin� PluginOptc @ s� e Zd ZdZdZdZedddd�gZdZd Z d
Z
d Z d Z d
d� Z
dd� Zdd� Zdefdd�Zededefdd��Zdd� Zeded efd d ��Zd S ) �GCPzGoogle Cloud Platform�gcp)�virt�keep-piiFzyStop the plugin from removing PIIs like project name or organization ID from the metadata retrieved from Metadata server.)�default�descz3http://metadata.google.internal/computeMetadata/v1/zBhttp://metadata.google.internal/computeMetadata/v1/?recursive=truez[--REDACTED--]NzDDMI: Google Google Compute Engine/Google Compute Engine, BIOS Googlec C s( | � d�}|d dkr
dS | j|d v S )z�
Checks if this plugin should be executed at all. In this case, it
will check the `dmesg` command output to see if the system is
running on a Google Cloud Compute instance.
�dmesg�statusr F�output)�exec_cmd�
GOOGLE_DMI)�selfr � r �8/usr/lib/python3/dist-packages/sos/report/plugins/gcp.py�
check_enabled) s
zGCP.check_enabledc C s$ | j ddgd� | jddgd� dS )z�
Collect the following info:
* Metadata from the Metadata server
* `gcloud auth list` output
* Any google services output from journal
zgcloud auth listr
��tagszgoogle*)�unitsr N)�add_cmd_output� add_journal�r r r r �setup4 s z GCP.setupc C s� | j ddgd��A}z| �� | _| �� |�tj| jdd�� W n ty8 } z
|�t|�� W Y d }~n
d }~ww W d � d S W d � d S 1 sLw Y d S )Nz
metadata.jsonr
r � )�indent) �collection_file� get_metadata�metadata�scrub_metadata�write�json�dumps� RuntimeError�str)r �mfile�errr r r �collectB s
����"�z GCP.collect�returnc C s" | � | j�}|�� �� }t�|�S )zq
Retrieves metadata from the Metadata Server and transforms it into a
dictionary object.
)�_query_address�METADATA_QUERY�read�decoder& �loads)r �response�
response_bodyr r r r" L s
zGCP.get_metadata�urlc
C s� z8t j| ddid�}t �|�� }|jdkr$td|j� d�|�� �� ��|W d � W S 1 s1w Y W dS tyM } z tdt|� �|�d}~ww ) zf
Query the given url address with headers required by Google Metadata
Server.
zMetadata-Flavor�Google)�headers�� z2Failed to communicate with Metadata Server (code: z): Nz,Failed to communicate with Metadata Server: ) r �Request�urlopen�coder( r0 r1 r r) )r5 �reqr3 r+ r r r r. U s*
�
��(�
����zGCP._query_addressc s� �� d�rdS �jd d � �jd d �t���dtdtf� ����fdd � ���j��_���jd d
d � ���jd d
d � dS )
a"
Remove all PII information from metadata, unless a keep-pii option
is specified.
Note: PII information collected by this plugin, like
project number, account names etc. might be required by Google
Cloud Support for faster issue resolution.
r N�project� projectId�numericProjectId�datar- c s� t | t�rd| v r�j| d< �fdd�| �� D �S t | t�r'�fdd�| D �S t | t�r8| ���j��� �j�S t | t�rF| �krD�jS | S | S )N�tokenc s i | ] \}}� |�� |��qS r r )�.0�k�v��scrubr r �
<dictcomp> s z5GCP.scrub_metadata.<locals>.scrub.<locals>.<dictcomp>c s g | ]}� |��qS r r )rB �valuerE r r �
<listcomp>� s z5GCP.scrub_metadata.<locals>.scrub.<locals>.<listcomp>)�
isinstance�dict�REDACTED�items�listr) �replace�int)r@ ��
project_id�project_number�project_number_intrF r r r rF y s
�
z!GCP.scrub_metadata.<locals>.scrub�
attributeszssh-keys�sshKeys)�
get_optionr# r) r �safe_redact_keyr r rQ r r$ i s
��zGCP.scrub_metadata�dict_obj�keyc C s ||v r | j ||< dS dS )z
Redact keys N)rL )�clsrY rZ r r r rX � s �zGCP.safe_redact_key)�__name__�
__module__� __qualname__�
short_desc� plugin_name�profilesr � option_list�
METADATA_ROOTr/ rL r# r r r r, rK r" � staticmethodr) r r. r$ � classmethodrX r r r r r s, ��
'r )r& � http.clientr �typingr �urllibr � urllib.errorr �sos.report.pluginsr r r r r r r r �<module> s