Sindbad~EG File Manager
3
�f� � @ sb d dl Z d dlmZ d dlmZ d dlmZ d dlmZ d dl m
Z
m Z m Z G dd� de
e �Z
dS ) � N)� HTTPResponse)�Any)�request)�URLError)�Plugin�IndependentPlugin� PluginOptc @ s� e Zd ZdZdZd Zedddd�gZdZd Z d
Z
d Z d Z d
d� Z
dd� Zdd� Zed�dd�Zeeed�dd��Zdd� Zeeed�d d ��Zd S ) �GCPzGoogle Cloud Platform�gcp�virtzkeep-piiFzyStop the plugin from removing PIIs like project name or organization ID from the metadata retrieved from Metadata server.)�defaultZdescz3http://metadata.google.internal/computeMetadata/v1/zBhttp://metadata.google.internal/computeMetadata/v1/?recursive=truez[--REDACTED--]NzDDMI: Google Google Compute Engine/Google Compute Engine, BIOS Googlec C s( | j d�}|d dkrdS | j|d kS )z�
Checks if this plugin should be executed at all. In this case, it
will check the `dmesg` command output to see if the system is
running on a Google Cloud Compute instance.
�dmesgZstatusr F�output)Zexec_cmd�
GOOGLE_DMI)�selfr
� r �/usr/lib/python3.6/gcp.py�
check_enabled) s
zGCP.check_enabledc C s$ | j ddgd� | jddgd� dS )z�
Collect the following info:
* Metadata from the Metadata server
* `gcloud auth list` output
* Any google services output from journal
zgcloud auth listr
)�tagszgoogle*)Zunitsr N)Zadd_cmd_outputZ add_journal)r r r r �setup4 s z GCP.setupc C s~ | j ddgd��d}y,| j� | _| j� |jtj| jdd�� W n0 tk
rn } z|jt|�� W Y d d }~X nX W d Q R X d S )Nz
metadata.jsonr
)r � )�indent) Zcollection_file� get_metadata�metadata�scrub_metadata�write�json�dumps� RuntimeError�str)r Zmfile�errr r r �collectB s
z GCP.collect)�returnc C s" | j | j�}|j� j� }tj|�S )zq
Retrieves metadata from the Metadata Server and transforms it into a
dictionary object.
)�_query_address�METADATA_QUERY�read�decoder �loads)r �responseZ
response_bodyr r r r L s zGCP.get_metadata)�urlr" c C s� yTt j| ddid�}t j|��.}|jdkrHtd|j� d�|j� j� ��|S Q R X W n4 tk
r� } ztdt|� �|�W Y dd}~X nX dS ) zf
Query the given url address with headers required by Google Metadata
Server.
zMetadata-FlavorZGoogle)Zheaders�� z2Failed to communicate with Metadata Server (code: z): Nz,Failed to communicate with Metadata Server: ) r ZRequestZurlopen�coder r% r& r r )r) Zreqr( r r r r r# U s
zGCP._query_addressc s� �j d�rdS �jd d � �jd d �t���ttd�� ����fdd� ���j��_�j�jd d d
� �j�jd d d � dS ) a"
Remove all PII information from metadata, unless a keep-pii option
is specified.
Note: PII information collected by this plugin, like
project number, account names etc. might be required by Google
Cloud Support for faster issue resolution.
zkeep-piiNZprojectZ projectIdZnumericProjectId)�datar" c s� t | t�r2d| kr �j| d< �fdd�| j� D �S t | t�rN�fdd�| D �S t | t�rp| j��j�j� �j�S t | t�r�| �kr��jS | S | S )N�tokenc s i | ]\}}� |�� |��qS r r )�.0�k�v)�scrubr r �
<dictcomp> s z5GCP.scrub_metadata.<locals>.scrub.<locals>.<dictcomp>c s g | ] }� |��qS r r )r. �value)r1 r r �
<listcomp>� s z5GCP.scrub_metadata.<locals>.scrub.<locals>.<listcomp>)�
isinstance�dict�REDACTED�items�listr �replace�int)r, )�
project_id�project_number�project_number_intr1 r r r r1 y s
z!GCP.scrub_metadata.<locals>.scrubZ
attributeszssh-keysZsshKeys)Z
get_optionr r r �safe_redact_key)r r )r< r= r> r1 r r r i s
zGCP.scrub_metadata)�dict_obj�keyc C s ||kr| j ||< dS )z
Redact keys N)r7 )�clsr@ rA r r r r? � s zGCP.safe_redact_key)r )�__name__�
__module__� __qualname__Z
short_descZ plugin_nameZprofilesr Z option_listZ
METADATA_ROOTr$ r7 r r r r r! r6 r � staticmethodr r r# r � classmethodr? r r r r r s&
'r )r Z http.clientr Ztypingr Zurllibr Z urllib.errorr Zsos.report.pluginsr r r r r r r r �<module> s
Sindbad File Manager Version 1.0, Coded By Sindbad EG ~ The Terrorists