o ɶd@sddlmZddlmZddlmZddlmZmZddlm Z ddl m Z m Z ddl mZddlmZmZmZd d lmZed ZGd d d eZdS))absolute_import)requests)six)retrycircuit_breaker) BaseClient)get_config_value_or_defaultvalidate_config)Signer)Sentinel#get_signer_from_authentication_typeAUTHENTICATION_TYPE_FIELD_NAME)certificates_type_mappingZMissingc@s@eZdZdZddZddZddZdd Zd d Zd d Z dS)CertificatesClientz* API for retrieving certificates. c Kst||ddd|vr|d}n"t|vrt|}nt|d|d|d|dt|d|dd }d |d d d i|dd|dtj|dd}d|vrY|d|d<|dduretj|d<d|vrp|d|d<t d||t fi||_ |d|_ |d|_ dS)a Creates a new service client :param dict config: Configuration keys and values as per `SDK and Tool Configuration `__. The :py:meth:`~oci.config.from_file` method can be used to load configuration from a file. Alternatively, a ``dict`` can be passed. You can validate_config the dict using :py:meth:`~oci.config.validate_config` :param str service_endpoint: (optional) The endpoint of the service to call using this client. For example ``https://iaas.us-ashburn-1.oraclecloud.com``. If this keyword argument is not provided then it will be derived using the region in the config parameter. You should only provide this keyword argument if you have an explicit need to specify a service endpoint. :param timeout: (optional) The connection and read timeouts for the client. The default values are connection timeout 10 seconds and read timeout 60 seconds. This keyword argument can be provided as a single float, in which case the value provided is used for both the read and connection timeouts, or as a tuple of two floats. If a tuple is provided then the first value is used as the connection timeout and the second value as the read timeout. :type timeout: float or tuple(float, float) :param signer: (optional) The signer to use when signing requests made by the service client. The default is to use a :py:class:`~oci.signer.Signer` based on the values provided in the config parameter. One use case for this parameter is for `Instance Principals authentication `__ by passing an instance of :py:class:`~oci.auth.signers.InstancePrincipalsSecurityTokenSigner` as the value for this keyword argument :type signer: :py:class:`~oci.signer.AbstractBaseSigner` :param obj retry_strategy: (optional) A retry strategy to apply to all calls made by this service client (i.e. at the client level). There is no retry strategy applied by default. Retry strategies can also be applied at the operation level by passing a ``retry_strategy`` keyword argument as part of calling the operation. Any value provided at the operation level will override whatever is specified at the client level. This should be one of the strategies available in the :py:mod:`~oci.retry` module. A convenience :py:data:`~oci.retry.DEFAULT_RETRY_STRATEGY` is also available. The specifics of the default retry strategy are described `here `__. :param obj circuit_breaker_strategy: (optional) A circuit breaker strategy to apply to all calls made by this service client (i.e. at the client level). This client uses :py:data:`~oci.circuit_breaker.DEFAULT_CIRCUIT_BREAKER_STRATEGY` as default if no circuit breaker strategy is provided. The specifics of circuit breaker strategy are described `here `__. :param function circuit_breaker_callback: (optional) Callback function to receive any exceptions triggerred by the circuit breaker. :param bool client_level_realm_specific_endpoint_template_enabled: (optional) A boolean flag to indicate whether or not this client should be created with realm specific endpoint template enabled or disable. By default, this will be set as None. :param allow_control_chars: (optional) allow_control_chars is a boolean to indicate whether or not this client should allow control characters in the response object. By default, the client will not allow control characters to be in the response object. signer)rtenancyuser fingerprintZkey_file pass_phraseZ key_content)rrrZprivate_key_file_locationrZprivate_key_contentTservice_endpointz /20210224z5https://certificates.{region}.oci.{secondLevelDomain}skip_deserializationFcircuit_breaker_strategy5client_level_realm_specific_endpoint_template_enabled)Zregional_clientr base_pathZservice_endpoint_templateZ#service_endpoint_template_per_realmrrrtimeoutNallow_control_charsZ certificatesretry_strategycircuit_breaker_callback)r getr r r rrZGLOBAL_CIRCUIT_BREAKER_STRATEGYZ DEFAULT_CIRCUIT_BREAKER_STRATEGYrr base_clientrr)selfconfigkwargsrZbase_client_init_kwargsr$Husr/lib/python3.10/site-packages/oci/certificates/certificates_client.py__init__s>3        zCertificatesClient.__init__c s^dg}d}d}d}d}gdfddt|D}|r$td |d|i} d d t| D} t| D]\} } | d usMt| tjrTt| d krTtd| q7dd| dt d} dd t| D} |j j | d|j d} | rt| tjs|j | | |j| j|j j||| | d| d|||d S|j j||| | d| d|||d S)a Gets a ca-bundle bundle. :param str ca_bundle_id: (required) The OCID of the CA bundle. :param str opc_request_id: (optional) Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. :param obj retry_strategy: (optional) A retry strategy to apply to this specific operation/call. This will override any retry strategy set at the client-level. This should be one of the strategies available in the :py:mod:`~oci.retry` module. This operation will not retry by default, users can also use the convenient :py:data:`~oci.retry.DEFAULT_RETRY_STRATEGY` provided by the SDK to enable retries for it. The specifics of the default retry strategy are described `here `__. To have this operation explicitly not perform any retries, pass an instance of :py:class:`~oci.retry.NoneRetryStrategy`. :param bool allow_control_chars: (optional) allow_control_chars is a boolean to indicate whether or not this request should allow control characters in the response object. By default, the response will not allow control characters in strings :return: A :class:`~oci.response.Response` object with data of type :class:`~oci.certificates.models.CaBundle` :rtype: :class:`~oci.response.Response` :example: Click `here `__ to see an example of how to use get_ca_bundle API. Z caBundleIdz/caBundles/{caBundleId}GET get_ca_bundlezPhttps://docs.oracle.com/iaas/api/#/en/certificates/20210224/CaBundle/GetCaBundle)rropc_request_idcg|]}|vr|qSr$r$.0_keyZexpected_kwargsr$r% z4CertificatesClient.get_ca_bundle..z&get_ca_bundle got unknown kwargs: {!r}cSi|] \}}|tur||qSr$missingr,kvr$r$r% z4CertificatesClient.get_ca_bundle..Nr7Parameter {} cannot be None, whitespace or empty stringapplication/jsonr)acceptz content-typezopc-request-idcS&i|]\}}|tur|dur||qSNr2r4r$r$r%r7&rZoperation_retry_strategyZclient_retry_strategyZCaBundler) resource_pathmethod path_params header_params response_typeroperation_nameapi_reference_linkrequired_argumentsrZiterkeys ValueErrorformatZ iteritems isinstanceZ string_typeslenstriprr3r Zget_preferred_retry_strategyrrZNoneRetryStrategyZadd_opc_client_retries_headerZadd_circuit_breaker_callbackrZmake_retrying_callZcall_api)r!Z ca_bundle_idr#rHrArBrFrG extra_kwargsrCr5r6rDrr$r.r%r(rsl$     z CertificatesClient.get_ca_bundlec sdg}d}d}d}d}gdfddt|D}|r$td |d|i} d d t| D} t| D]\} } | d usMt| tjrTt| d krTtd| q7d|vrjgd} |d| vrjtd| | dt | dt | dt d} dd t| D} dd| dt d}dd t|D}|j j | d|j d}|rt|tjs|j |||j|j|j j||| | |d| d|||d S|j j||| | |d| d|||d S)a: Gets a certificate authority bundle that matches either the specified `stage`, `name`, or `versionNumber` parameter. If none of these parameters are provided, the bundle for the certificate authority version marked as `CURRENT` will be returned. :param str certificate_authority_id: (required) The OCID of the certificate authority (CA). :param str opc_request_id: (optional) Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. :param int version_number: (optional) The version number of the certificate authority (CA). :param str certificate_authority_version_name: (optional) The name of the certificate authority (CA). (This might be referred to as the name of the CA version, as every CA consists of at least one version.) Names are unique across versions of a given CA. :param str stage: (optional) The rotation state of the certificate version. Allowed values are: "CURRENT", "PENDING", "LATEST", "PREVIOUS", "DEPRECATED" :param obj retry_strategy: (optional) A retry strategy to apply to this specific operation/call. This will override any retry strategy set at the client-level. This should be one of the strategies available in the :py:mod:`~oci.retry` module. This operation will not retry by default, users can also use the convenient :py:data:`~oci.retry.DEFAULT_RETRY_STRATEGY` provided by the SDK to enable retries for it. The specifics of the default retry strategy are described `here `__. To have this operation explicitly not perform any retries, pass an instance of :py:class:`~oci.retry.NoneRetryStrategy`. :param bool allow_control_chars: (optional) allow_control_chars is a boolean to indicate whether or not this request should allow control characters in the response object. By default, the response will not allow control characters in strings :return: A :class:`~oci.response.Response` object with data of type :class:`~oci.certificates.models.CertificateAuthorityBundle` :rtype: :class:`~oci.response.Response` :example: Click `here `__ to see an example of how to use get_certificate_authority_bundle API. certificateAuthorityIdz5/certificateAuthorityBundles/{certificateAuthorityId}r' get_certificate_authority_bundlezthttps://docs.oracle.com/iaas/api/#/en/certificates/20210224/CertificateAuthorityBundle/GetCertificateAuthorityBundle)rrr)version_number"certificate_authority_version_namestagecr*r$r$r+r.r$r%r/ r0zGCertificatesClient.get_certificate_authority_bundle..z9get_certificate_authority_bundle got unknown kwargs: {!r}cSr1r$r2r4r$r$r%r7r8zGCertificatesClient.get_certificate_authority_bundle..Nrr9rTZCURRENTZPENDINGZLATESTZPREVIOUSZ DEPRECATED-Invalid value for `stage`, must be one of {0}rRrS) versionNumberZcertificateAuthorityVersionNamerTcSr=r>r2r4r$r$r%r7(r?r:r)r;cSr=r>r2r4r$r$r%r7/r?rr@ZCertificateAuthorityBundler rArBrC query_paramsrDrErrFrGrHrI)r!certificate_authority_idr#rHrArBrFrGrOrCr5r6stage_allowed_valuesrYrDrr$r.r%rQs+$         z3CertificatesClient.get_certificate_authority_bundlec sdg}d}d}d}d}gdfddt|D}|r$td |d|i} d d t| D} t| D]\} } | d usMt| tjrTt| d krTtd| q7d|vrjgd} |d| vrjtd| d|vrddg} |d| vrtd| | dt | dt | dt | dt d}dd t|D}dd| dt d}dd t|D}|j j | d|j d}|rt|tjs|j |||j|j|j j||| ||d | d!|||d" S|j j||| ||d | d!|||d" S)#a Gets a certificate bundle that matches either the specified `stage`, `versionName`, or `versionNumber` parameter. If none of these parameters are provided, the bundle for the certificate version marked as `CURRENT` will be returned. By default, the private key is not included in the query result, and a CertificateBundlePublicOnly is returned. If the private key is needed, use the CertificateBundleTypeQueryParam parameter to get a CertificateBundleWithPrivateKey response. :param str certificate_id: (required) The OCID of the certificate. :param str opc_request_id: (optional) Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. :param int version_number: (optional) The version number of the certificate. The default value is 0, which means that this query parameter is ignored. :param str certificate_version_name: (optional) The name of the certificate. (This might be referred to as the name of the certificate version, as every certificate consists of at least one version.) Names are unique across versions of a given certificate. :param str stage: (optional) The rotation state of the certificate version. Allowed values are: "CURRENT", "PENDING", "LATEST", "PREVIOUS", "DEPRECATED" :param str certificate_bundle_type: (optional) The type of certificate bundle. By default, the private key fields are not returned. When querying for certificate bundles, to return results with certificate contents, the private key in PEM format, and the private key passphrase, specify the value of this parameter as `CERTIFICATE_CONTENT_WITH_PRIVATE_KEY`. Allowed values are: "CERTIFICATE_CONTENT_PUBLIC_ONLY", "CERTIFICATE_CONTENT_WITH_PRIVATE_KEY" :param obj retry_strategy: (optional) A retry strategy to apply to this specific operation/call. This will override any retry strategy set at the client-level. This should be one of the strategies available in the :py:mod:`~oci.retry` module. This operation will not retry by default, users can also use the convenient :py:data:`~oci.retry.DEFAULT_RETRY_STRATEGY` provided by the SDK to enable retries for it. The specifics of the default retry strategy are described `here `__. To have this operation explicitly not perform any retries, pass an instance of :py:class:`~oci.retry.NoneRetryStrategy`. :param bool allow_control_chars: (optional) allow_control_chars is a boolean to indicate whether or not this request should allow control characters in the response object. By default, the response will not allow control characters in strings :return: A :class:`~oci.response.Response` object with data of type :class:`~oci.certificates.models.CertificateBundle` :rtype: :class:`~oci.response.Response` :example: Click `here `__ to see an example of how to use get_certificate_bundle API. certificateIdz#/certificateBundles/{certificateId}r'get_certificate_bundlezbhttps://docs.oracle.com/iaas/api/#/en/certificates/20210224/CertificateBundle/GetCertificateBundle)rrr)rRcertificate_version_namerTcertificate_bundle_typecr*r$r$r+r.r$r%r/r0z=CertificatesClient.get_certificate_bundle..z/get_certificate_bundle got unknown kwargs: {!r}cSr1r$r2r4r$r$r%r7r8z=CertificatesClient.get_certificate_bundle..Nrr9rTrUrVr_ZCERTIFICATE_CONTENT_PUBLIC_ONLYZ$CERTIFICATE_CONTENT_WITH_PRIVATE_KEYz?Invalid value for `certificate_bundle_type`, must be one of {0}rRr^)rWZcertificateVersionNamerTZcertificateBundleTypecSr=r>r2r4r$r$r%r7r?r:r)r;cSr=r>r2r4r$r$r%r7r?rr@ZCertificateBundlerrXrI)r!certificate_idr#rHrArBrFrGrOrCr5r6r[Z&certificate_bundle_type_allowed_valuesrYrDrr$r.r%r]Ss3 $           z)CertificatesClient.get_certificate_bundlec dg}d}d}d}d}gdfddt|D}|r$td |d|i} d d t| D} t| D]\} } | d usMt| tjrTt| d krTtd| q7d|vridg} |d| vritd| d|vr~ddg} |d| vr~td| | dt | dt d}dd t|D}dd| dt d}dd t|D}|j j | d|j d}|rt|tjs|j |||j|j|j j||| ||d| d|||d S|j j||| ||d| d|||d S)!a Lists all certificate authority bundle versions for the specified certificate authority. :param str certificate_authority_id: (required) The OCID of the certificate authority (CA). :param str opc_request_id: (optional) Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. :param str sort_by: (optional) The field to sort by. You can specify only one sort order. The default order for `VERSION_NUMBER` is ascending. Allowed values are: "VERSION_NUMBER" :param str sort_order: (optional) The sort order to use, either ascending (`ASC`) or descending (`DESC`). Allowed values are: "ASC", "DESC" :param obj retry_strategy: (optional) A retry strategy to apply to this specific operation/call. This will override any retry strategy set at the client-level. This should be one of the strategies available in the :py:mod:`~oci.retry` module. This operation will not retry by default, users can also use the convenient :py:data:`~oci.retry.DEFAULT_RETRY_STRATEGY` provided by the SDK to enable retries for it. The specifics of the default retry strategy are described `here `__. To have this operation explicitly not perform any retries, pass an instance of :py:class:`~oci.retry.NoneRetryStrategy`. :param bool allow_control_chars: (optional) allow_control_chars is a boolean to indicate whether or not this request should allow control characters in the response object. By default, the response will not allow control characters in strings :return: A :class:`~oci.response.Response` object with data of type :class:`~oci.certificates.models.CertificateAuthorityBundleVersionCollection` :rtype: :class:`~oci.response.Response` :example: Click `here `__ to see an example of how to use list_certificate_authority_bundle_versions API. rPz>/certificateAuthorityBundles/{certificateAuthorityId}/versionsr'*list_certificate_authority_bundle_versionszhttps://docs.oracle.com/iaas/api/#/en/certificates/20210224/CertificateAuthorityBundleVersionSummary/ListCertificateAuthorityBundleVersionsrrr)sort_by sort_ordercr*r$r$r+r.r$r%r/r0zQCertificatesClient.list_certificate_authority_bundle_versions..zClist_certificate_authority_bundle_versions got unknown kwargs: {!r}cSr1r$r2r4r$r$r%r7%r8zQCertificatesClient.list_certificate_authority_bundle_versions..Nrr9rdVERSION_NUMBER/Invalid value for `sort_by`, must be one of {0}reASCDESC2Invalid value for `sort_order`, must be one of {0}ZsortByZ sortOrdercSr=r>r2r4r$r$r%r7=r?r:r)r;cSr=r>r2r4r$r$r%r7Dr?rr@Z+CertificateAuthorityBundleVersionCollectionrrXrI)r!rZr#rHrArBrFrGrOrCr5r6sort_by_allowed_valuessort_order_allowed_valuesrYrDrr$r.r%rb*$         z=CertificatesClient.list_certificate_authority_bundle_versionsc ra)!a Lists all certificate bundle versions for the specified certificate. :param str certificate_id: (required) The OCID of the certificate. :param str opc_request_id: (optional) Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. :param str sort_by: (optional) The field to sort by. You can specify only one sort order. The default order for `VERSION_NUMBER` is ascending. Allowed values are: "VERSION_NUMBER" :param str sort_order: (optional) The sort order to use, either ascending (`ASC`) or descending (`DESC`). Allowed values are: "ASC", "DESC" :param obj retry_strategy: (optional) A retry strategy to apply to this specific operation/call. This will override any retry strategy set at the client-level. This should be one of the strategies available in the :py:mod:`~oci.retry` module. This operation will not retry by default, users can also use the convenient :py:data:`~oci.retry.DEFAULT_RETRY_STRATEGY` provided by the SDK to enable retries for it. The specifics of the default retry strategy are described `here `__. To have this operation explicitly not perform any retries, pass an instance of :py:class:`~oci.retry.NoneRetryStrategy`. :param bool allow_control_chars: (optional) allow_control_chars is a boolean to indicate whether or not this request should allow control characters in the response object. By default, the response will not allow control characters in strings :return: A :class:`~oci.response.Response` object with data of type :class:`~oci.certificates.models.CertificateBundleVersionCollection` :rtype: :class:`~oci.response.Response` :example: Click `here `__ to see an example of how to use list_certificate_bundle_versions API. r\z,/certificateBundles/{certificateId}/versionsr' list_certificate_bundle_versionszyhttps://docs.oracle.com/iaas/api/#/en/certificates/20210224/CertificateBundleVersionSummary/ListCertificateBundleVersionsrccr*r$r$r+r.r$r%r/r0zGCertificatesClient.list_certificate_bundle_versions..z9list_certificate_bundle_versions got unknown kwargs: {!r}cSr1r$r2r4r$r$r%r7r8zGCertificatesClient.list_certificate_bundle_versions..Nrr9rdrfrgrerhrirjrkcSr=r>r2r4r$r$r%r7r?r:r)r;cSr=r>r2r4r$r$r%r7r?rr@Z"CertificateBundleVersionCollectionrrXrI)r!r`r#rHrArBrFrGrOrCr5r6rlrmrYrDrr$r.r%rohrnz3CertificatesClient.list_certificate_bundle_versionsN) __name__ __module__ __qualname____doc__r&r(rQr]rbror$r$r$r%rsXa rN) __future__rZ oci._vendorrrocirrZoci.base_clientrZ oci.configrr Z oci.signerr Zoci.utilr r r Zmodelsrr3objectrr$r$r$r%s