Ke6y @sddlZddlZddlZddlZddlmZmZmZmZm Z ddl m Z m Z m Z mZmZmZmZmZddlmZddlmZddlmZddlmZmZmZddlmZdd lm Z d Z!d Z"d Z#d Z$d Z%dZ&dZ'dZ(dZ)dZ*dZ+ddddddddiZ,e j-Z.ej/ej0e1Z2ej3Gdddej4Z5Gddde j6Z7e8ddd Z9d!eee:efee:efe;e;dd"d#d$Z<d%d!eee:efee:efe;e;e ee;fd&d'd(Z=ej>ej?d)d*d+Z@d,d-ZAeeed.d/d0ZBee:ee:efd1d2d3ZCee;d.d4d5ZDee:e:fee:e:feEd6d7d8ZFdee:efe:e:ee:eeEee:effd9d:d;ZGddee:efee:ee:dd<d=d>ZHee e5eEfd.d?d@ZIdS)AN)AnyDictListOptionalTuple)clouds event_logger exceptionshttpmessagessystemutilversion)_enabled_services) _is_attached)UAConfig)ATTACH_FAIL_DATE_FORMAT!CONTRACT_EXPIRY_GRACE_PERIOD_DAYSCONTRACT_EXPIRY_PENDING_DAYS)attachment_data_file) serviceclientz/v1/context/machines/tokenz3/v1/contracts/{contract}/context/machines/{machine}z /v1/resourcesz3/v1/resources/{resource}/context/machines/{machine}z/v1/clouds/{cloud_type}/tokenz3/v1/contracts/{contract}/machine-activity/{machine}z /v1/contractz/v1/magic-attachseries_overridesseriescloudvariantc@s.eZdZdZdZdZdZdZdS)ContractExpiryStatusrrrrrN)__name__ __module__ __qualname__NONEACTIVEACTIVE_EXPIRED_SOONEXPIRED_GRACE_PERIODEXPIREDr(r(3/usr/lib/python3/dist-packages/uaclient/contract.pyr>s rc @seZdZdZejejddddgdddZe e e fdd d Z e e e e fd d d Z ejejddddgejdddZdde e ee ee e e fdddZddZe e e e fdddZe e e fdddZe dddZde e ee e e e fdd d!Zde e ee e dd"d#Zd$d%ZdS)&UAContractClientZ contract_urlZ retry_sleepsrrNc Cs|stj|j}|j}|jddj|i|j}|j|ds z7UAContractClient._get_activity_info..ZresourceVariantscSs(i|]}|jr|j|jqSr()Zvariant_enabledZ variant_namer)rrr(r(r) s z7UAContractClient._get_activity_info..r,N)r get_release_infor}Zget_kernel_infoZ uname_releaserZ get_dpkg_archZ is_desktopZ get_virt_typerZ get_versionrr6 is_attachedrenabled_servicesrreadreZ activity_idr5Zactivity_tokenZ attached_atr:)rAZ machine_inforZattachment_datarDr(r(r)r9s,      z#UAContractClient._get_activity_info)r r!r"Zcfg_url_base_attrr ZretrysocketZtimeoutrGrstrrrNrPrZAutoAttachCloudInstancer[rboolrbrirrrvrxrzr|r9r(r(r(r)r*Gs& $" " &"*#r*) request_bodycCs|jdi}d|jdd|d|jddd|jdd|jdd|jddd d tjjiiS) a? Transforms a request_body that has the new activity_info into a body that includes both old and new forms of machineInfo/activityInfo This is necessary because there may be old ua-airgapped contract servers deployed that we need to support. This function is used for attach and refresh calls. r.r-rJosr}rKrtypeZLinuxrelease)rVr rr)rrDr(r(r)r;s r;T)r6past_entitlementsnew_entitlements allow_enablerrHcCsddlm}d}d}g}xK||D]=} y|| } Wntk rZw/YnXg}y=td|d|j| id| d|d|\} } Wntjk r} z8tj| d }|j | tj d | | WYd d } ~ Xq/t k rR} z8tj| d }|j | tjd | | WYd d } ~ Xq/X| r/| r/t j | q/Wt j||rtjd dd|Dn%|rtjd dd|Dd S)aIterate over all entitlements in new_entitlement and apply any delta found according to past_entitlements. :param cfg: UAConfig instance :param past_entitlements: dict containing the last valid information regarding service entitlements. :param new_entitlements: dict containing the current information regarding service entitlements. :param allow_enable: Boolean set True if allowed to perform the enable operation. When False, a message will be logged to inform the user about the recommended enabled service. :param series_overrides: Boolean set True if series overrides should be applied to the new_access dict. r)entitlements_enable_orderFr6 orig_access new_accessrrTz+Failed to process contract delta for %s: %rNz5Unexpected error processing contract delta for %s: %rfailed_servicescSsg|]}|tjfqSr()r ZUNEXPECTED_ERROR)rrr(r(r)r*s z.process_entitlements_delta..cSsg|]}|tjfqSr()r Z!E_ATTACH_FAILURE_DEFAULT_SERVICES)rrr(r(r)r0s )uaclient.entitlementsrKeyErrorprocess_entitlement_deltarVr ZUbuntuProErrorrWrmappenderror ExceptioneventZservice_processedZservices_failedZAttachFailureUnknownErrorZAttachFailureDefaultServices)r6rrrrrZ delta_errorZunexpected_errorrrnew_entitlementdeltasZservice_enabledrqr(r(r)process_entitlements_deltasV          rF)r6rrrrrHc CsYddlm}|r t|tj||}d}|rO|jdijd}|sz|jdijd}|stjd|d||jdijd ijd d } y|d |d |d| } Wn>tjk r!} zt j d|| WYdd} ~ XnX| d |d|} | j ||d|}||fS)a,Process a entitlement access dictionary deltas if they exist. :param cfg: UAConfig instance :param orig_access: Dict with original entitlement access details before contract refresh deltas :param new_access: Dict with updated entitlement access details after contract refresh :param allow_enable: Boolean set True if allowed to perform the enable operation. When False, a message will be logged to inform the user about the recommended enabled service. :param series_overrides: Boolean set True if series overrides should be applied to the new_access dict. :raise UbuntuProError: on failure to process deltas. :return: A tuple containing a dict of processed deltas and a boolean indicating if the service was fully processed r)entitlement_factoryF entitlementrZorignew entitlementsZ obligationsZ use_selectorrTr6rrz3Skipping entitlement deltas for "%s". No such classNZ assume_yesr) rrapply_contract_overridesr get_dict_deltasrVr Z InvalidContractDeltasServiceTypeZEntitlementNotFoundErrorrWrXZprocess_contract_deltas) r6rrrrrrZretrrZent_clsexcrr(r(r)r6s2     r)rFrHcCs|jjd}|r|d}|d}|dkry|djt}tjd|d|d|djd nk|d kr|djt}tjd|d|d |djd n|d krtjd|tjdS) NinfoZ contractIdreasonzno-longer-effectiveZtimerfdateZcontract_expiry_datez%m-%d-%Yznot-effective-yetZcontract_effective_dateznever-effective) r@rVZstrftimerr ZAttachForbiddenExpiredZAttachForbiddenNotYetZAttachForbiddenNeverZAttachExpiredToken)rFrrfrrr(r(r)r>rs&       r>cCs|jj}|j}|d}|ddd}t|}|jd|d|}|jj|tjj|j dij dtj|}|j d|t |||jjd d d S) a Request contract refresh from ua-contracts service. :param cfg: Instance of UAConfig for this machine. :raise UbuntuProError: on failure to update contract or error processing contract deltas :raise UrlError: On failure during a connection rcmachineTokenInfo contractInfoidr\rfr-z machine-idrFN) rerr\r*r|rhr r5 cache_clearrVrYr)r6orig_entitlements orig_tokenr\rfcontract_clientresprCr(r(r)refreshs"       r)r6rHcCs(t|}|j}|jdgS)zDQuery available resources from the contract server for this machine.r~)r*rNrV)r6clientr~r(r(r)get_available_resourcess  r)r6tokenrHcCst|}|j|S)z/Query contract information for a specific token)r*rP)r6rrr(r(r)get_contract_informations rc Cs2|j}|jj}|jdd}|jdijdijdd}|s[dSt|}|j||}|jdijdijdd}|r|n |jj}|jj|krdS|jj|} xHt| j D]4\} } t j |j| i| } | rdSqWdS) NrcrTrrrFZ effectiveToT) r\rerrVr*rzZcontract_expiry_datetimeZget_entitlements_from_tokensorteditemsr r) r6rrr\rfrrZ resp_expiryZ new_expiryZcurr_entitlementsrrrr(r(r)is_contract_changeds2           r)override_selectorselector_valuesrHcCsQd}xD|jD]6\}}||f|jkr;dS|t|7}qW|S)Nr)rOVERRIDE_SELECTOR_WEIGHTS)rrZoverride_weightselectorvaluer(r(r)_get_override_weights r)r series_namerRrrHc Csi}d|d|i}|r(||d<|jdij|i}|rZ||tds        r)JrZenumZloggingrZtypingrrrrrZuaclientrrr r r r r rZ-uaclient.api.u.pro.status.enabled_services.v1rZ(uaclient.api.u.pro.status.is_attached.v1rZuaclient.configrZuaclient.defaultsrrrZuaclient.files.state_filesrZ uaclient.httprr=ryr{rMrarUrgrOrkrurwrZget_event_loggerrZ getLoggerZreplace_top_level_logger_namer rWZuniqueZEnumrZUAServiceClientr*rr;rrrrZ HTTPResponseZ NamedMessager>rrrrintrrrrr(r(r(r)sj    (:    &Q&7 "%').