Server : Apache/2.4.52 (Ubuntu) System : Linux webserver 6.8.0-49-generic #49~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Wed Nov 6 17:42:15 UTC 2 x86_64 User : www-data ( 33) PHP Version : 8.1.2-1ubuntu2.21 Disable Function : NONE Directory : /lib/python3/dist-packages/sos/report/plugins/__pycache__/ |
o
i��d� � @ sb d dl Z d dlmZ d dlmZ d dlmZ d dlmZ d dl m
Z
m Z m Z G dd� de
e �Z
dS ) � N)� HTTPResponse)�Any)�request)�URLError)�Plugin�IndependentPlugin� PluginOptc @ s� e Zd ZdZdZdZedddd�gZdZd Z d
Z
d Z d d
� Z dd� Z
dd� Zdefdd�Zededefdd��Zdd� Zededefd d ��Zd S ) �GCPzGoogle Cloud Platform�gcp)�virt�keep-piiFzyStop the plugin from removing PIIs like project name or organization ID from the metadata retrieved from Metadata server.)�default�descz3http://metadata.google.internal/computeMetadata/v1/zBhttp://metadata.google.internal/computeMetadata/v1/?recursive=truez[--REDACTED--]zDDMI: Google Google Compute Engine/Google Compute Engine, BIOS Googlec C s( | � d�}|d dkr
dS | j|d v S )z�
Checks if this plugin should be executed at all. In this case, it
will check the `dmesg` command output to see if the system is
running on a Google Cloud Compute instance.
�dmesg�statusr F�output)�exec_cmd�
GOOGLE_DMI)�selfr � r �8/usr/lib/python3/dist-packages/sos/report/plugins/gcp.py�
check_enabled( s
zGCP.check_enabledc C s$ | j ddgd� | jddgd� dS )z�
Collect the following info:
* Metadata from the Metadata server
* `gcloud auth list` output
* Any google services output from journal
zgcloud auth listr
��tagszgoogle*)�unitsr N)�add_cmd_output� add_journal�r r r r �setup3 s z GCP.setupc C s� | j ddgd��A}z| �� | _| �� |�tj| jdd�� W n ty8 } z
|�t|�� W Y d }~n
d }~ww W d � d S W d � d S 1 sLw Y d S )Nz
metadata.jsonr
r � )�indent) �collection_file� get_metadata�metadata�scrub_metadata�write�json�dumps� RuntimeError�str)r �mfile�errr r r �collectA s
����"�z GCP.collect�returnc C s" | � | j�}|�� �� }t�|�S )zq
Retrieves metadata from the Metadata Server and transforms it into a
dictionary object.
)�_query_address�METADATA_QUERY�read�decoder& �loads)r �response�
response_bodyr r r r" K s
zGCP.get_metadata�urlc
C sv zt j| ddid�}t �|�}W n ty$ } ztdt|� ��d}~ww |jdkr9td|j� d�|�� �� ��|S ) zf
Query the given url address with headers required by Google Metadata
Server.
zMetadata-Flavor�Google)�headersz,Failed to communicate with Metadata Server: N�� z2Failed to communicate with Metadata Server (code: z): ) r �Request�urlopenr r( r) �coder0 r1 )r5 �reqr3 r+ r r r r. T s$
���
�
��zGCP._query_addressc s� �� d�rdS �jd d � �jd d �t���dtdtf� ����fdd � ���j��_���jd d
d � ���jd d
d � dS )
a"
Remove all PII information from metadata, unless a keep-pii option
is specified.
Note: PII information collected by this plugin, like
project number, account names etc. might be required by Google
Cloud Support for faster issue resolution.
r N�project� projectId�numericProjectId�datar- c s� t | t�rd| v r�j| d< �fdd�| �� D �S t | t�r'�fdd�| D �S t | t�r8| ���j��� �j�S t | t�rF| �krD�jS | S | S )N�tokenc s i | ] \}}� |�� |��qS r r )�.0�k�v��scrubr r �
<dictcomp>| s z5GCP.scrub_metadata.<locals>.scrub.<locals>.<dictcomp>c s g | ]}� |��qS r r )rB �valuerE r r �
<listcomp>~ s z5GCP.scrub_metadata.<locals>.scrub.<locals>.<listcomp>)�
isinstance�dict�REDACTED�items�listr) �replace�int)r@ ��
project_id�project_number�project_number_intrF r r r rF v s
�
z!GCP.scrub_metadata.<locals>.scrub�
attributeszssh-keys�sshKeys)�
get_optionr# r) r �safe_redact_keyr r rQ r r$ f s
��zGCP.scrub_metadata�dict_obj�keyc C s ||v r | j ||< d S d S )N)rL )�clsrY rZ r r r rX � s �zGCP.safe_redact_keyN)�__name__�
__module__� __qualname__�
short_desc� plugin_name�profilesr � option_list�
METADATA_ROOTr/ rL r r r r, rK r" � staticmethodr) r r. r$ � classmethodrX r r r r r s* ��
'r )r& � http.clientr �typingr �urllibr � urllib.errorr �sos.report.pluginsr r r r r r r r �<module> s