
    ?gP                     x   d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dl	Z	d dl
Z
d dlmZ d dlZd dlZd dlZd dlZd dlZd dlmZ d dlmZ d dlmZmZ d dlmZ ddlmZ dd	lm Z m!Z!m"Z" 	 d dl#Z# ejJ                  d
      Z&ejN                  jQ                  dd      Z) ejT                         dk(  rdndZ+i a,d Z-d%dZ.d Z/ G d de0      Z1 G d de0      Z2 G d de0      Z3 G d de0      Z4 G d d      Z5	 d&dZ6	 	 	 d'dZ7d%d Z8	 	 	 	 d(d!Z9	 	 	 	 d)d"Z:	 	 	 	 d)d#Z;	 	 	 	 	 d*d$Z<y# e$$ r Y w xY w)+    N)
namedtuple)OAuth2Session)PY3)	ApiClientConfiguration)ExecProvider   )ConfigException)UTCformat_rfc3339parse_rfc3339   )minutes
KUBECONFIGz~/.kube/configWindows;:c                      t         j                         D ]  } 	 t        j                  |         i a y # t        $ r Y )w xY wN)_temp_filesvaluesosremoveOSError)	temp_files    R/var/www/openai/venv/lib/python3.12/site-packages/kubernetes/config/kube_config.py_cleanup_temp_filesr   5   sA     '')		IIi  *
 K  		s   3	??c                    t        t              dk(  rt        j                  t               t        |       }|t        v r	t        |   S |r5t        j                  j                  |      st        j                  |       t        j                  |      \  }}t        j                  |       |t        |<   t        |d      5 }|j                  t        | t
              r| j!                         n|        d d d        |S # 1 sw Y   |S xY w)Nr   )name)dirwb)lenr   atexitregisterr   strr   pathisdirmakedirstempfilemkstempcloseopenwrite
isinstanceencode)contenttemp_file_pathcontent_keyfdr   s        r   _create_temp_file_with_contentr4   ?   s    
;1+, g,Kk!;''bggmmN;
(N3HBHHRL#K	dD	R
Z%=!7K 
K 
Ks   2C>>Dc                 p    t        |       t        z
  t        j                  j                  t              k  S )Ntz)r   EXPIRY_SKEW_PREVENTION_DELAYdatetimenowr   )expirys    r   _is_expiredr<   Q   s1    6"%AA!!S!)* +    c                   *    e Zd ZdZ	 	 	 ddZd Zd Zy)
FileOrDataaC  Utility class to read content of obj[%data_key_name] or file's
     content of obj[%file_key_name] and represent it as file or data.
     Note that the data is preferred. The obj[%file_key_name] will be used iff
     obj['%data_key_name'] is not set or empty. Assumption is file content is
     raw data and data field is base64 string. The assumption can be changed
     with base64_file_content flag. If set to False, the content of the file
     will assumed to be base64 and read as is. The default True value will
     result in base64 encode of the file content after read.Nc                    |s|dz   }d | _         d | _        || _        || _        |sy ||v r||   | _        y ||v rFt        j
                  j                  t        j
                  j                  |||               | _         y y )Nz-data)_file_data_base64_file_content_temp_file_pathr   r&   normpathjoin)selfobjfile_key_namedata_key_namefile_base_pathbase64_file_contentr1   s          r   __init__zFileOrData.__init__`   s     )G3M

$7!-C]+DJc!))^S-?@BDJ "r=   c                 0   | j                    xr | j                  }|r| j                  rpt        | j                  t              r| j                  j                         }n| j                  }t        t        j                  |      | j                        | _         n%t        | j                  | j                        | _         | j                   rAt        j                  j                  | j                         st        d| j                   z        | j                   S )zIf obj[%data_key_name] exists, return name of a file with base64
        decoded obj[%data_key_name] content otherwise obj[%file_key_name].zFile does not exist: %s)rA   rB   rC   r.   r%   r/   r4   base64standard_b64decoderD   r   r&   isfiler
   )rG   use_data_if_no_filer0   s      r   as_filezFileOrData.as_fileq   s     #'**n;((djj#."jj//1G"jjG;--g68L8LN
 <JJ 4 46
::bggnnTZZ8!";djj"HIIzzr=   c           	         | j                    xr | j                  }|rt        | j                        5 }| j                  rOt        j                  t        j                  t        j                  |j                                           | _         n|j                         | _         ddd       | j                   S | j                   S # 1 sw Y   | j                   S xY w)zIf obj[%data_key_name] exists, Return obj[%data_key_name] otherwise
        base64 encoded string of obj[%file_key_name] file content.N)rB   rA   r,   rC   bytesdecoderO   standard_b64encoder%   r/   read)rG   use_file_if_no_datafs      r   as_datazFileOrData.as_data   s     #'**n;djj!Q,,!&11#**QVVX2FG"IDJ "#DJ " zztzz " zzs   A1CC)N TN)__name__
__module____qualname____doc__rM   rS   r[    r=   r   r?   r?   V   s#    @ :>8< $B"&r=   r?   c                       e Zd Zd Zd Zy)CommandTokenSourcec                 d    || _         || _        |sd| _        n|| _        |sd| _        y || _        y )Nz{.access_token}z{.token_expiry})_cmd_args	_tokenKey
_expiryKey)rG   cmdargstokenKey	expiryKeys        r   rM   zCommandTokenSource.__init__   s2    	
.DN%DN/DO'DOr=   c                 j   | j                   dz   dj                  | j                        z   }t        j                  | j                   g| j                  z   t        j
                  t        j
                  d      }|j                         \  }}|j                         }|dk7  r2d|z  }|d|z  z  }|j                         }|r|d|z  z  }t        |      	 t        j                  |      }t        d	d
dg      }	 |	|d   d   t        |d   d               S # t        $ r}t        d|z        d }~ww xY w)N T)stdoutstderruniversal_newlinesr   zcmd-path: process returned %dz
Cmd: %sz
Stderr: %sz)exec: failed to decode process output: %sAtokenr;   
credentialaccess_tokentoken_expiry)rs   r;   )re   rF   rf   
subprocessPopenPIPEcommunicatewaitstripr
   jsonloads
ValueErrorr   r   )
rG   fullCmdprocessro   rp   	exit_codemsgdataderr   s
             r   rs   zCommandTokenSource.token   s=   ))s#chhtzz&::""YYK$**$????#	%
 #..0LLN	>1I=C;((C\\^F~..!#&&	B::f%D sWh/0|$^4 l!3N!CDF 	F	  	B!;b@B B	Bs   D 	D2D--D2N)r]   r^   r_   rM   rs   ra   r=   r   rc   rc      s    
(Fr=   rc   c                       e Zd Z	 	 	 	 	 ddZddZd Zd Zd Zd Zd Z	d	 Z
d
 Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zed        Zy)KubeConfigLoaderNc                 "    |t        d      t        |t              r| _        nt        d|       _        d  _        d  _        d  _         j                  |       | _        | _	        | _
         fd fd}|r| _        y | _        y )Nz9Invalid kube-config. Expected config_dict to not be None.zkube-configc                  x   j                   d   d   } | d   }t        |      dk(  rt        d      d| v r| d   dk7  rt        d      g }d	| v r| d	   j                         }n| d   j                         }|d   }|d
d  }t	        ||| j                  d      | j                  d            }|j                         S )Nauth-providerconfigcmd-pathr   zNmissing access token cmd (cmd-path is an empty string in your kubeconfig file)scopesr\   zGscopes can only be used when kubectl is using a gcp service account keyzcmd-argsr	   z	token-keyz
expiry-key)_userr"   r
   splitrc   safe_getrs   )r   ri   rj   fieldscommandTokenSourcerG   s        r   "_refresh_credentials_with_cmd_pathzEKubeConfigLoader.__init__.<locals>._refresh_credentials_with_cmd_path   s    ZZ0:F$C3x1}%LM M 6!fX&6"&<%FG G DV#j)//1
+113Qiabz!3T,-"/ &++--r=   c                  L   dj                   v r,dj                   d   v rdj                   d   d   v r        S t        j                  j                  ddg      \  } }t        j                  j                  j
                  j                         }| j                  |       | S )Nr   r   r   z.https://www.googleapis.com/auth/cloud-platformz.https://www.googleapis.com/auth/userinfo.email)r   )r   googleauthdefault	transportrequestsRequestrefresh)credentials
project_idrequestr   rG   s      r   _refresh_credentialsz7KubeConfigLoader.__init__.<locals>._refresh_credentials   s    4::-DJJ77$**_"=h"GG9;;&,kk&9&9@@B&9 '#K kk++44<<>G(r=   )r
   r.   
ConfigNode_config_current_contextr   _clusterset_active_context_config_base_path_config_persisterrD   _get_google_credentials)	rG   config_dictactive_contextget_google_credentialsconfig_base_pathconfig_persisterr1   r   r   s	   `       @r   rM   zKubeConfigLoader.__init__   s     !78 8 Z0&DL%m[ADL $
/!1!1-	.2	 "+AD(+?D(r=   c                    || j                   d   }| j                   d   j                  |      | _        | j                  d   j                  d      r`| j                   j                  d      rE| j                   d   j                  | j                  d   d   d      }|r|d   | _        nd | _        nd | _        | j                   d   j                  | j                  d   d	         d	   | _        y )
Ncurrent-contextcontextscontextuserusersT)safeclusterscluster)r   get_with_namer   r   r   r   )rG   context_namer   s      r   r   z#KubeConfigLoader.set_active_context   s    <<(9:L $Z 8 F F!!!),55f=%%g.<<(66%%i08t 7 ED!&\
!
DJZ0>>!!),Y799BDr=   c                     | j                   sy| j                         ry| j                         ry| j                         ry| j	                          y)a  Read authentication from kube-config user section if exists.

        This function goes through various authentication methods in user
        section of kube-config and stops if it finds a valid authentication
        method. The order of authentication methods is:

            1. auth-provider (gcp, azure, oidc)
            2. token field (point to a token file)
            3. exec provided plugin
            4. username/password
        N)r   _load_auth_provider_token_load_user_token_load_from_exec_plugin_load_user_pass_tokenrG   s    r   _load_authenticationz%KubeConfigLoader._load_authentication  sG     zz))+  "&&(""$r=   c                     d| j                   vry | j                   d   }d|vry |d   dk(  r| j                  |      S |d   dk(  r| j                  |      S |d   dk(  r| j                  |      S y )Nr   r   gcpazureoidc)r   _load_gcp_token_load_azure_token_load_oid_tokenrG   providers     r   r   z*KubeConfigLoader._load_auth_provider_token(  s    $**,::o.!Fu$''11Fw&))(33Fv%''11 &r=   c                     |d   d   }|j                         r t        |      t        j                         k  S t        j                  |d      }|t        j                         k  S )Nr   
expires-onz%Y-%m-%d %H:%M:%S.%f)isdigitinttimestrptimegmtime)rG   r   
expires_onexp_times       r   _azure_is_expiredz"KubeConfigLoader._azure_is_expired5  sT    h'5
z?TYY[00}}Z1GHHdkkm++r=   c                     d|vry d|d   vry d|d   v r%| j                  |      r| j                  |d          d|d   d   z  | _        | j                  S )Nr   access-tokenr   	Bearer %s)r   _refresh_azure_tokenrs   r   s     r   r   z"KubeConfigLoader._load_azure_token=  sk    8#(!338H--%%h/))(8*<= 8H#5n#EE
zzr=   c                    dt               vrt        d      |d   }dj                  |      }t        j                  |dd      }|d   }|d	   }d
}	 |d   }|j                  |||      }| j                  d   d   }	|d   |	j                  d<   |d   |	j                  d<   | j                  r| j                          y y # t
        $ r Y rw xY w)Nadalz.refresh token error, adal library not importedz	tenant-idz$https://login.microsoftonline.com/{}Tz1.0)validate_authorityapi_versionrefresh-token	client-idz$00000002-0000-0000-c000-000000000000zapiserver-idr   r   accessTokenr   	expiresOnr   )
globalsImportErrorformatr   AuthenticationContextr
    acquire_token_with_refresh_tokenr   valuer   )
rG   r   tenant	authorityr   refresh_token	client_idapiserver_idtoken_responser   s
             r   r   z%KubeConfigLoader._refresh_azure_tokenH  s    "NOO$:AA&I	,,$E
 /;'	=	!.1L !AA9l4 ::o.x8)7)F~&'5k'B|$!!""$ "  		s   B? ?	C
Cc                     d|vsd|d   vsd|d   v r!t        |d   d         r| j                          d|d   d   z  | _        d|d   v rt        |d   d         | _        | j                  S )Nr   r   r;   r   )r<   _refresh_gcp_tokenrs   r   r;   r   s     r   r   z KubeConfigLoader._load_gcp_tokenb  s    X%x'99Xh//Xh/9:##% 8H#5n#EE
x))'(:8(DEDKzzr=   c                 R   d| j                   d   vri | j                   d   j                  d<   | j                   d   d   }| j                         }|j                  |j                  d<   t	        |j
                        |j                  d<   | j                  r| j                          y y )Nr   r   r   r;   )r   r   r   rs   r   r;   r   )rG   r   r   s      r   r   z#KubeConfigLoader._refresh_gcp_tokeno  s    4::o66:<DJJ'--h7::o.x8224)4):):~&#1+2D2D#Ex !!""$ "r=   c                    d|vry t        g d      }|d   d   t        fd|D              ry j                  d      }t        |      dk7  ry dt        |d         dz  z
  d	z  }t        |      dk(  ry t        r>t        j                  t        j                  |d   |z         j                  d
            }n.t        j                  t        j                  |d   |z               }|j                  d      }|[t        t        j                  j                  |t                    r-| j!                  |       | j"                  r| j#                          d|d   d   z  | _        | j$                  S )Nr   )=+/id-tokenc              3   &   K   | ]  }|v  
 y wr   ra   ).0charrs   s     r   	<genexpr>z3KubeConfigLoader._load_oid_token.<locals>.<genexpr>  s     =)<tu})<s   .      r	   r   utf-8expr6   r   )	frozensetanyr   r"   r   r}   r~   rO   urlsafe_b64decoderV   	b64decodegetr<   r9   fromtimestampr   _refresh_oidcr   rs   )rG   r   reserved_characterspartspaddingjwt_attributesexpirers   s          @r   r   z KubeConfigLoader._load_oid_tokeny  s_   8#'8":.=)<==C u:?s58}q((C/w<1 !ZZ((qG);<CCGLN "ZZ  qG!34N  ##E***88<? 9 A Bx(%%&&( 8H#5j#AA
zzr=   c                    t               }d|d   v rt        j                  d      }t        r+t	        j
                  |d   d         j                  d      }nt	        j
                  |d   d   dz         }t        |j                  d      5 }|j                  |       d d d        |j                  |_
        nd|d   v r|d   d   |_
        nd	|_        t        |
      }|j                  dd|d   d   z        }|j                  dk7  ry t        j                   |j"                        }t%        |d   d   |d   d   |d   d   |d   d   d|d         }	 |j'                  |d   |d   d   |d   d   |d   d   f|j                  r|j                  nd       }	|	d   |d   j2                  d<   |	d   |d   j2                  d<   y # 1 sw Y   ,xY w# t(        j*                  j,                  j.                  j0                  $ r Y y w xY w)Nzidp-certificate-authority-datar   T)deleter   z==wzidp-certificate-authorityFconfigurationGETz#%s/.well-known/openid-configurationzidp-issuer-url)methodurl   r   r   zclient-secret)r   client_secrettoken_endpoint)r   rs   auto_refresh_kwargsauto_refresh_url)	token_urlr   r   verifyid_tokenr   r   )r   r)   NamedTemporaryFiler   rO   r   rV   r,   r   r-   ssl_ca_cert
verify_sslr   r   statusr}   r~   r   r   r   oauthliboauth2rfc6749errorsInvalidClientIdErrorr   )
rG   r   r   ca_certcertfhclientresponser   r   s
             r   r  zKubeConfigLoader._refresh_oidc  sE   +x/AA11>G''X&'GH&/  ''X&'GH4O gllC(B ) ")F(HX,>>!)(!34O!PF !&F0>>5x !123 " 
 ??c!::hmm,x(58$_5%h/<!)(!3O!D! &&67
		++"#34&x0Ax(5x(9;-3->->v))D , G 07z/B  ,4;O4L  1] )(T &&--BB 		s   G	AG 	G1H
	H
c                    d| j                   vry 	 | j                  | j                  j                        }t	        | j                   d   || j                        j                         }d|v rd|d   z  | _        nd|v rwd|vrt        j                  d       y t        |d d|d| j                        j                         | _        t        |d d|d| j                        j                         | _        nt        j                  d	       y d
|v rt        |d
         | _        y# t         $ r(}t        j                  t#        |             Y d }~y d }~ww xY w)Nexecrs   r   clientCertificateDataclientKeyDataz2exec: missing clientKeyData field in plugin outputF)rJ   rK   rL   r1   zCexec: missing token or clientCertificateData field in plugin outputexpirationTimestampT)r   _get_base_pathr   r&   r   runrs   loggingerrorr?   rD   rS   	cert_filekey_filer   r;   	Exceptionr%   )rG   	base_pathr  es       r   r   z'KubeConfigLoader._load_from_exec_plugin  sJ   # 	"++DMM,>,>?I!$**V"4iOSSUF& (6'?:
(F2 #&0MM #2 3!+D"9#,(-#'#7#7"9
 :A  !+D"1#,(-#'#7#7!9
 :A   7 8$.+F3H,IJ 	"MM#a&!!	"s%   BD# A2D# D# #	E,EEc                     | j                  | j                  j                        }t        | j                  dd|d| j                        j                         }|rd|z  | _        yy )N	tokenFilers   F)rK   rL   r1   r   T)r*  r   r&   r?   rD   r[   rs   )rG   r1  rs   s      r   r   z!KubeConfigLoader._load_user_token
  sc    ''

8	JJW$ %//	1 29	 	
 $u,DJ r=   c                     d| j                   v rdd| j                   v rUt        j                  j                  | j                   d   dz   | j                   d   z         j	                  d      | _        yy y )Nusernamepasswordr   )
basic_authauthorizationT)r   urllib3utilmake_headersr   rs   r   s    r   r   z&KubeConfigLoader._load_user_pass_token  sq    #
djj(@ 22 JJz2S8 JJz23 3 558S5I J 	 )A#r=   c                     | j                   | j                   S |<t        j                  j                  t        j                  j	                  |            S y)Nr\   )r   r   r&   abspathdirname)rG   config_paths     r   r*  zKubeConfigLoader._get_base_path  sC    !!-)))"77??277??;#?@@r=   c                    d| j                   v r| j                   d   j                  d      | _        | j                  j                  d      r| j	                  | j                   j
                        }t        | j                   d|| j                        j                         | _	        d| j                  vrlt        | j                  d|| j                        j                         | _        t        | j                  d|| j                        j                         | _        d	| j                   v r| j                   d	    | _        d
| j                   v r| j                   d
   | _        y y )Nserverr   httpszcertificate-authority)rK   r1   r.  zclient-certificatez
client-keyzinsecure-skip-tls-verifyztls-server-name)r   rstriphost
startswithr*  r&   r?   rD   rS   r  __dict__r   r.  r/  r  tls_server_name)rG   r1  s     r   _load_cluster_infoz#KubeConfigLoader._load_cluster_info#  s9   t}}$h/66s;DIyy##G, //0B0BC	#-MM#:#,#'#7#7$9 :A   dmm3 &0

$8'0'+';';&= >EWY N %/

L'0'+';';%= >EWY M &6"&--0J"KKDO-#'==1B#CD  .r=   c           	           d j                   v r% j                  |j                  d<    fd}||_        g d}|D ](  }| j                   v st	        ||t         |             * y )Nrs   r9  c                     dj                   v r%t        j                        rj                          j	                  |        y )Nr;   )rG  r<   r;   r   _set_config)client_configurationrG   s    r   _refresh_api_keyz6KubeConfigLoader._set_config.<locals>._refresh_api_keyA  s5    -+dkk2J--/  !56r=   )rE  r  r.  r/  r  rH  )rG  rs   api_keyrefresh_api_key_hooksetattrgetattr)rG   rM  rN  keyskeys   `    r   rL  zKubeConfigLoader._set_config=  sd    dmm#<@JJ ((97 9I 5_Cdmm#,c743EF r=   c                 f    | j                          | j                          | j                  |       y r   )r   rI  rL  )rG   rM  s     r   load_and_setzKubeConfigLoader.load_and_setL  s)    !!#!-.r=   c                 Z    | j                   d   D cg c]  }|j                   c}S c c}w )Nr   )r   r   )rG   r   s     r   list_contextszKubeConfigLoader.list_contextsQ  s)    -1\\*-EF-E'-EFFFs   (c                 .    | j                   j                  S r   )r   r   r   s    r   current_contextz KubeConfigLoader.current_contextT  s    $$***r=   )NNr\   NNr   )r]   r^   r_   rM   r   r   r   r   r   r   r   r   r   r  r   r   r   r*  rI  rL  rV  rX  propertyrZ  ra   r=   r   r   r      s    37(,"$"& $	B@HD$%,2,	%4%+Z=M~#"J	D4G/
G + +r=   r   c                   8    e Zd ZdZd	dZd Zd Zd Zd Zd
dZ	y)r   zRemembers each config key's path and construct a relevant exception
    message in case of missing keys. The assumption is all access keys are
    present in a well-formed kube-config.Nc                 .    || _         || _        || _        y r   )r   r   r&   )rG   r   r   r&   s       r   rM   zConfigNode.__init__^  s    	
	r=   c                     || j                   v S r   )r   rG   rT  s     r   __contains__zConfigNode.__contains__c  s    djj  r=   c                 ,    t        | j                        S r   )r"   r   r   s    r   __len__zConfigNode.__len__f  s    4::r=   c                     t        | j                  t              rt        |t              s|| j                  v r| j                  |   S y r   )r.   r   listr   r_  s     r   r   zConfigNode.safe_geti  s8    tzz4(ZS-Atzz!::c?" "r=   c                     | j                  |      }|t        d|d| j                        t        |t              st        |t
              r&t        | j                  d||| j                        S |S )Nz'Invalid kube-config file. Expected key  in r   )r   r
   r   r.   dictrd  r   r&   )rG   rT  vs      r   __getitem__zConfigNode.__getitem__n  sf    MM#9!		#$ $ a*Q"5C8!TYYGGHr=   c                    t        | j                  t              st        d| j                  z        d }| j                  D ]G  }d|vrt        d| j                  z        |d   |k(  s(||}-t        d|d| j                  d       |9t        |t
              r|S t        | j                  d|d|| j                        S |ry t        d	|d| j                  d      )
Nz2Invalid kube-config file. Expected %s to be a listr   zKInvalid kube-config file. Expected all values in %s list to have 'name' keyz=Invalid kube-config file. Expected only one object with name rf  z listz[name=]z4Invalid kube-config file. Expected object with name )r.   r   rd  r
   r   r   r&   )rG   r   r   resultrh  s        r   r   zConfigNode.get_with_namey  s    $**d+!D))  AQ%Jii ! ! yD >F)  ,- -  &*-!YY&'-tyy: : 9=tyyJK 	Kr=   r   F)
r]   r^   r_   r`   rM   r`  rb  r   ri  r   ra   r=   r   r   r   Y  s&    -
!#
	Kr=   r   c                   J    e Zd ZdZd Zed        Zd Zd Zd Z	d Z
d Zd	 Zy
)KubeConfigMergera  Reads and merges configuration from one or more kube-config's.
    The property `config` can be passed to the KubeConfigLoader as config_dict.

    It uses a path attribute from ConfigNode to store the path to kubeconfig.
    This path is required to load certs from relative paths.

    A method `save_changes` updates changed kubeconfig's (it compares current
    state of dicts with).
    c                     g | _         i | _        d | _        t        |d      r| j	                  |       y | j                  |       y )NrX   )pathsconfig_filesconfig_mergedhasattr"_load_config_from_file_like_object_load_config_from_file_path)rG   rq  s     r   rM   zKubeConfigMerger.__init__  s?    
!5&!33E:,,U3r=   c                     | j                   S r   )rs  r   s    r   r   zKubeConfigMerger.config  s    !!!r=   c                    t        |d      r$t        j                  |j                               }n#t        j                  |j	                               }|t        d      | j                  t        j                  |      | _        y y )NgetvaluezInvalid kube-config.)	rt  yaml	safe_loadry  rX   r
   rs  copydeepcopy)rG   stringr   s      r   ru  z3KubeConfigMerger._load_config_from_file_like_object  sl    6:&^^FOO$56F^^FKKM2F>!&( (%!%v!6D &r=   c                 \   |j                  t              D ]p  }|st        j                  j	                  |      }t        j                  j                  |      sE| j                  j                  |       | j                  |       r t        j                  | j                        | _        y r   )r   ENV_KUBECONFIG_PATH_SEPARATORr   r&   
expanduserexistsrq  appendload_configr|  r}  rr  config_saved)rG   r~  r&   s      r   rv  z,KubeConfigMerger._load_config_from_file_path  sw    LL!>?Dww))$/77>>$'JJ%%d+$$T* @ !MM$*;*;<r=   c                    t        |      5 }t        j                  |      }d d d        t        d|z        | j                  3t        j                  |      }dD ]  }g ||<   	 t        |||      | _        dD ])  }| j                  ||j                  |g       xs g |       + d|v r|d   | j                  j                  d<   || j                  |<   y # 1 sw Y   xY w)Nz%Invalid kube-config. %s file is empty)r   r   r   r   )r,   rz  r{  r
   rs  r|  r}  r   _merger   r   rr  )rG   r&   rZ   r   rs  items         r   r  zKubeConfigMerger.load_config  s    $Z1^^A&F  >!#%)*+ + % MM&1M9&(d# :!+D-!FD5DKKfjjr28b$? 6 &:@AR:SD$$%67"($' Zs   CC c           	          |D ]p  }| j                   j                  |   D ]  }|d   |d   k(  s - | j                   j                  |   j                  t        dj	                  ||      ||             r y )Nr   z{}/{})rs  r   r  r   r   )rG   r  add_cfgr&   new_itemr  s         r   r  zKubeConfigMerger._merge  sw    H,,2248&>Xf%55 9 ""((.55jNN42Hd7D E  r=   c                     | j                   D ]3  }| j                  |   | j                  |   k7  s#| j                  |       5 t	        j
                  | j                        | _        y r   )rq  r  rr  save_configr|  r}  )rG   r&   s     r   save_changeszKubeConfigMerger.save_changes  sU    JJD  &$*;*;D*AA  &  !MM$*;*;<r=   c                     t        |d      5 }t        j                  | j                  |   |d       d d d        y # 1 sw Y   y xY w)Nr	  F)default_flow_style)r,   rz  	safe_dumprr  )rG   r&   rZ   s      r   r  zKubeConfigMerger.save_config  s5    $_NN4,,T2A.35 __s	   &<AN)r]   r^   r_   r`   rM   r[  r   ru  rv  r  r  r  r  ra   r=   r   ro  ro    s?    4 " "
7=),E=5r=   ro  c                     t        d| |d|S )N)filenamepersist_configra   )_get_kube_config_loader)r  r  kwargss      r   %_get_kube_config_loader_for_yaml_filer    s$    " %  r=   c                     |Ot        |       }|rd|vr|j                  |d<   |j                  t        d      t	        d|j                  d d|S t	        d|d d|S )Nr   z1Invalid kube-config file. No configuration found.)r   r   ra   )ro  r  r   r
   r   )r  r   r  r  kcfgs        r   r  r    s    
 )0>)-):):F%&;;!*+ +   !  	
   #!  	r=   c                 b    | t         } t        |       }|j                         |j                  fS )N)r  )KUBE_CONFIG_DEFAULT_LOCATIONr  rX  rZ  )config_fileloaders     r   list_kube_config_contextsr    s1    2$k:F!6#9#999r=   c                     | t         } t        | |||      }|@t        j                  t              }|j                  |       t	        j                  |       y|j                  |       y)a,  Loads authentication and cluster information from kube-config file
    and stores them in kubernetes.client.configuration.

    :param config_file: Name of the kube-config file.
    :param context: set the active context. If is set to None, current_context
        from config file will be used.
    :param client_configuration: The kubernetes.client.Configuration to
        set configs to.
    :param persist_config: If True, config file will be updated when changed
        (e.g GCP token refresh).
    :param temp_file_path: store temp files path.
    N)r  r   r  r1   )r  r  type__call__r   rV  set_default)r  r   rM  r  r1   r  r   s          r   load_kube_configr    se    " 2$W%%'F
 #}-F#!!&)01r=   c                     | t        d      t        | |||      }|@t        j                  t              }|j                  |       t	        j                  |       y|j                  |       y)a/  Loads authentication and cluster information from config_dict file
    and stores them in kubernetes.client.configuration.

    :param config_dict: Takes the config file as a dict.
    :param context: set the active context. If is set to None, current_context
        from config file will be used.
    :param client_configuration: The kubernetes.client.Configuration to
        set configs to.
    :param persist_config: If True, config file will be updated when changed
        (e.g GCP token refresh).
    :param temp_file_path: store temp files path.
    Nz1Invalid kube-config dict. No configuration found.)r   r   r  r1   )r
   r  r  r  r   rV  r  )r   r   rM  r  r1   r  r   s          r   load_kube_config_from_dictr  @  st      &' 	' %%%'F
 #}-F#!!&)01r=   c                 n    |t         j                  t              }t        | |||       t	        |      S )z
    Loads configuration the same as load_kube_config but returns an ApiClient
    to be used with any API object. This will allow the caller to concurrently
    talk with multiple clusters.
    )r  r   rM  r  r
  )r  r  r   r  r   )r  r   r  rM  s       r   new_client_from_configr  b  s9     ##}}];g*>$24 #788r=   c                 p    |t         j                  t              }t        | ||||       t	        |      S )z
    Loads configuration the same as load_kube_config_from_dict but returns an ApiClient
    to be used with any API object. This will allow the caller to concurrently
    talk with multiple clusters.
    )r   r   rM  r  r1   r
  )r  r  r   r  r   )r   r   r  r1   rM  s        r   new_client_from_config_dictr  t  s<     ##}}];;4H.<.<> #788r=   r   rm  )NNF)NNNTN)NNTN)NNTNN)=r#   rO   r|  r9   r}   r,  r   platformrw   r)   r   collectionsr   google.authr   google.auth.transport.requestsoauthlib.oauth2r  r:  rz  requests_oauthlibr   sixr   kubernetes.clientr   r   kubernetes.config.exec_providerr   config_exceptionr
   dateutilr   r   r   r   r   	timedeltar8   environr   r  systemr  r   r   r4   r<   objectr?   rc   r   r   ro  r  r  r  r  r  r  r  ra   r=   r   <module>r     sz         	     "  %    +  6 8 - 8 8	  2x11!< !zz~~l<LM '6x'8I'E3 $+
9 9x%F %FP\+v \+~?K ?KDW5 W5v "' 2: 04*.$($(2B 5948.2.22F !	9& !9Q  		s   2D1 1D98D9