File: //lib/google-cloud-sdk/lib/surface/org_policies/list.py
# -*- coding: utf-8 -*- #
# Copyright 2019 Google LLC. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
"""List command for the Org Policy CLI."""
from __future__ import absolute_import
from __future__ import division
from __future__ import unicode_literals
from googlecloudsdk.api_lib.orgpolicy import service as org_policy_service
from googlecloudsdk.calliope import base
from googlecloudsdk.command_lib.org_policies import arguments
from googlecloudsdk.command_lib.org_policies import utils
def HasListPolicy(spec):
for rule in spec.rules:
if (rule.values is not None or rule.allowAll is not None or
rule.denyAll is not None):
return True
return False
def HasBooleanPolicy(spec):
return any([rule.enforce is not None for rule in spec.rules])
@base.Hidden
@base.ReleaseTracks(base.ReleaseTrack.ALPHA)
class List(base.ListCommand):
r"""List the policies set on a resource.
Lists the policies set on a resource.
## EXAMPLES
To list the policies set on the Project 'foo-project', run:
$ {command} --project=foo-project
"""
@staticmethod
def Args(parser):
arguments.AddResourceFlagsToParser(parser)
parser.add_argument(
'--show-unset',
action='store_true',
help='Show all available constraints for the resource.')
parser.display_info.AddFormat(
'table(constraint, listPolicy, booleanPolicy, etag)')
def Run(self, args):
policy_service = org_policy_service.PolicyService()
constraint_service = org_policy_service.ConstraintService()
org_policy_messages = org_policy_service.OrgPolicyMessages()
output = []
parent = utils.GetResourceFromArgs(args)
list_policies_request = org_policy_messages.OrgpolicyPoliciesListRequest(
parent=parent)
list_policies_response = policy_service.List(list_policies_request)
policies = list_policies_response.policies
for policy in policies:
spec = policy.spec
list_policy_set = HasListPolicy(spec)
boolean_policy_set = HasBooleanPolicy(spec)
output.append({
'constraint': policy.name.split('/')[-1],
'listPolicy': 'SET' if list_policy_set else '',
'booleanPolicy': 'SET' if boolean_policy_set else '',
'etag': spec.etag
})
if args.show_unset:
list_constraints_request = org_policy_messages.OrgpolicyConstraintsListRequest(
parent=parent)
list_constraints_response = constraint_service.List(
list_constraints_request)
constraints = list_constraints_response.constraints
existing_policy_names = {row['constraint'] for row in output}
for constraint in constraints:
constraint_name = constraint.name.split('/')[-1]
if constraint_name not in existing_policy_names:
output.append({'constraint': constraint_name})
return output