Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
__pycache__	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
accelerator_types	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
addresses	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
advice	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
backend_buckets	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
backend_services	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
commitments	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
composite_health_checks	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
diagnose	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
disk_settings	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
disk_types	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
disks	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
external_vpn_gateways	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
firewall_policies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
firewall_rules	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
forwarding_rules	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
future_reservations	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
global_vm_extension_policies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
ha_controllers	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
health_aggregation_policies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
health_checks	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
health_sources	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
hosts	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
http_health_checks	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
https_health_checks	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
images	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
instance_groups	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
instance_settings	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
instance_templates	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
instances	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
instant_snapshot_groups	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
instant_snapshots	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
interconnects	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
machine_images	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
machine_types	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
multi_migs	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
network_attachments	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
network_edge_security_services	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
network_endpoint_groups	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
network_firewall_policies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
network_policies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
network_profiles	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
networks	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
operations	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
org_rollout_plans	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
org_rollouts	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
org_security_policies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
os_config	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
os_login	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
packet_mirrorings	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
preview_features	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
project_info	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
project_zonal_metadata	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
public_advertised_prefixes	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
public_delegated_prefixes	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
queued_resources	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
recoverable_snapshots	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
regions	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
reliability_risks	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
reservations	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
resource_policies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
rollout_plans	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
rollouts	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
routers	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
routes	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
security_policies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
service_attachments	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
shared_vpc	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
snapshot_groups	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
snapshot_recycle_bin_policy	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
snapshot_settings	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
snapshots	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
sole_tenancy	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
ssl_certificates	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
ssl_policies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
storage_pool_types	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
storage_pools	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
target_grpc_proxies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
target_http_proxies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
target_https_proxies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
target_instances	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
target_pools	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
target_ssl_proxies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
target_tcp_proxies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
target_vpn_gateways	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
tpus	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
url_maps	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
vpn_gateways	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
vpn_tunnels	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
zone_vm_extension_policies	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
zones	[ DIR ]	drwxr-xr-x	2026-06-08 18:08
__init__.py	2.1 KB	-rw-r--r--	1980-01-01 08:00
config_ssh.py	14.13 KB	-rw-r--r--	1980-01-01 08:00
connect_to_serial_port.py	12.29 KB	-rw-r--r--	1980-01-01 08:00
copy_files.py	3.15 KB	-rw-r--r--	1980-01-01 08:00
reset_windows_password.py	16.41 KB	-rw-r--r--	1980-01-01 08:00
scp.py	6.85 KB	-rw-r--r--	1980-01-01 08:00
sign_url.py	4.75 KB	-rw-r--r--	1980-01-01 08:00
ssh.py	21.22 KB	-rw-r--r--	1980-01-01 08:00
start_iap_tunnel.py	10.81 KB	-rw-r--r--	1980-01-01 08:00

Rename

# -*- coding: utf-8 -*- #
# Copyright 2018 Google LLC. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
"""Implements the command for starting a tunnel with Cloud IAP."""

import collections

from googlecloudsdk.api_lib.compute import base_classes
from googlecloudsdk.api_lib.compute import iap_tunnel_websocket
from googlecloudsdk.calliope import arg_parsers
from googlecloudsdk.calliope import base
from googlecloudsdk.calliope import exceptions as calliope_exceptions
from googlecloudsdk.command_lib.compute import iap_tunnel
from googlecloudsdk.command_lib.compute import scope
from googlecloudsdk.command_lib.compute import ssh_utils
from googlecloudsdk.command_lib.compute.instances import flags
from googlecloudsdk.core import log
from googlecloudsdk.core import properties

_CreateTargetArgs = collections.namedtuple('_TargetArgs', [
    'project', 'zone', 'instance', 'interface', 'port', 'region', 'network',
    'host', 'dest_group', 'security_gateway'
])

_NUMPY_HELP_TEXT = """

To increase the performance of the tunnel, consider installing NumPy. For instructions,
please see https://cloud.google.com/iap/docs/using-tcp-forwarding#increasing_the_tcp_upload_bandwidth
"""

def _DetailedHelp():
  """Construct help text based on the command release track."""
  detailed_help = {
      'brief':
          'Starts an IAP TCP forwarding tunnel.',
      'DESCRIPTION':
          """\
Starts a tunnel to Cloud Identity-Aware Proxy for TCP forwarding through which
another process can create a connection (eg. SSH, RDP) to a Google Compute
Engine instance.

To learn more, see the
[IAP for TCP forwarding documentation](https://cloud.google.com/iap/docs/tcp-forwarding-overview).

If the `--region` and `--network` flags are provided, then an IP address or FQDN
must be supplied instead of an instance name. This is most useful for connecting
to on-prem resources.
""",
      'EXAMPLES':
          """\
To open a tunnel to the instances's RDP port on an arbitrary local port, run:

$ {command} my-instance 3389

To open a tunnel to the instance's RDP port on a specific local port, run:

$ {command} my-instance 3389 --local-host-port=localhost:3333

To use the IP address or FQDN of your remote VM (eg, for on-prem), you must also
specify the `--region` and `--network` flags:

$ {command} 10.1.2.3 3389 --region=us-central1 --network=default
"""
  }

return detailed_help

@base.UniverseCompatible
@base.ReleaseTracks(base.ReleaseTrack.GA, base.ReleaseTrack.PREVIEW)
class StartIapTunnel(base.Command):
  """Starts an IAP TCP forwarding tunnel."""

fetch_instance_after_connect_error = True
  support_security_gateway = False

@classmethod
  def Args(cls, parser):
    iap_tunnel.AddProxyServerHelperArgs(parser)
    flags.INSTANCE_ARG.AddArgument(parser)
    parser.add_argument(
        'instance_port',
        type=arg_parsers.BoundedInt(lower_bound=1, upper_bound=65535),
        help="The name or number of the instance's port to connect to.")

local_host_port_help_text = """\
`LOCAL_HOST:LOCAL_PORT` on which gcloud should bind and listen for connections
that should be tunneled.

`LOCAL_PORT` may be omitted, in which case it is treated as 0 and an arbitrary
unused local port is chosen. The colon also may be omitted in that case.

If `LOCAL_PORT` is 0, an arbitrary unused local port is chosen."""
    parser.add_argument(
        '--local-host-port',
        type=lambda arg: arg_parsers.HostPort.Parse(arg, ipv6_enabled=True),
        default='localhost:0',
        help=local_host_port_help_text)

# It would be logical to put --local-host-port and --listen-on-stdin in a
    # mutex group, but then the help text would display a message saying "At
    # most one of these may be specified" even though it only shows
    # --local-host-port.
    parser.add_argument(
        '--listen-on-stdin',
        action='store_true',
        hidden=True,
        help=('Whether to get/put local data on stdin/stdout instead of '
              'listening on a socket.  It is an error to specify '
              '--local-host-port with this, because that flag has no meaning '
              'with this.'))
    parser.add_argument(
        '--iap-tunnel-disable-connection-check',
        default=False,
        action='store_true',
        help='Disables the immediate check of the connection.')

iap_tunnel.AddHostBasedTunnelArgs(parser, cls.support_security_gateway)

def Run(self, args):
    if args.listen_on_stdin and args.IsSpecified('local_host_port'):
      raise calliope_exceptions.ConflictingArgumentsException(
          '--listen-on-stdin', '--local-host-port')

target = self._GetTargetArgs(args)
    iap_tunnel_helper = self._CreateIapTunnelHelper(args, target)

self._CheckNumpyInstalled()
    try:
      iap_tunnel_helper.Run()
    except iap_tunnel_websocket.ConnectionCreationError as e:
      if (self._ShouldFetchInstanceAfterConnectError(args.zone) and
          not target.host):
        # Try to fetch the instance, to see if we can get a more precise error
        # message. If we can, then this will throw an exception, and we won't
        # raise the ConnectionCreationError.
        self._FetchInstance(args)

raise e

def _ShouldFetchInstanceAfterConnectError(self, zone):
    # Zone must be set, otherwise we will need to use the instance resolver.
    return self.fetch_instance_after_connect_error and zone

def _CreateIapTunnelHelper(self, args, target):

if self.support_security_gateway and args.security_gateway:
      tunneler = iap_tunnel.SecurityGatewayTunnelHelper(
          args, project=target.project, region=target.region,
          security_gateway=target.security_gateway,
          host=target.host, port=target.port, use_dest_group=target.dest_group)
    elif target.host:
      tunneler = iap_tunnel.IAPWebsocketTunnelHelper(
          args, target.project,
          region=target.region,
          network=target.network,
          host=target.host,
          port=target.port,
          dest_group=target.dest_group)
    else:
      tunneler = iap_tunnel.IAPWebsocketTunnelHelper(
          args, target.project,
          zone=target.zone,
          instance=target.instance,
          interface=target.interface,
          port=target.port)

if args.listen_on_stdin:
      iap_tunnel_helper = iap_tunnel.IapTunnelStdinHelper(tunneler)
    else:
      local_host, local_port = self._GetLocalHostPort(args)
      check_connection = True
      if hasattr(args, 'iap_tunnel_disable_connection_check'):
        check_connection = not args.iap_tunnel_disable_connection_check
      iap_tunnel_helper = iap_tunnel.IapTunnelProxyServerHelper(
          local_host, local_port, check_connection, tunneler)

return iap_tunnel_helper

def _GetTargetArgs(self, args):
    if args.IsSpecified('network') and args.IsSpecified('region'):
      return _CreateTargetArgs(
          project=properties.VALUES.core.project.GetOrFail(),
          region=args.region,
          network=args.network,
          host=args.instance_name,
          port=args.instance_port,
          dest_group=args.dest_group,
          zone=None,
          instance=None,
          interface=None,
          security_gateway=None)

if self.support_security_gateway and args.security_gateway:
      return _CreateTargetArgs(
          project=properties.VALUES.core.project.GetOrFail(),
          host=args.instance_name,
          port=args.instance_port,
          region=args.region,
          security_gateway=args.security_gateway,
          network=None,
          dest_group=args.use_dest_group,
          zone=None,
          instance=None,
          interface=None)

if self._ShouldFetchInstanceAfterConnectError(args.zone):
      # Do not fetch instance prior to connecting.
      return _CreateTargetArgs(
          project=properties.VALUES.core.project.GetOrFail(),
          zone=args.zone,
          instance=args.instance_name,
          interface='nic0',
          port=args.instance_port,
          region=None,
          network=None,
          host=None,
          dest_group=None,
          security_gateway=None)

instance_ref, instance_obj = self._FetchInstance(args)

return _CreateTargetArgs(
        project=instance_ref.project,
        zone=instance_ref.zone,
        instance=instance_obj.name,
        interface=ssh_utils.GetInternalInterface(instance_obj).name,
        port=args.instance_port,
        region=None,
        network=None,
        host=None,
        dest_group=None,
        security_gateway=None)

def _FetchInstance(self, args):
    holder = base_classes.ComputeApiHolder(self.ReleaseTrack())
    client = holder.client
    ssh_helper = ssh_utils.BaseSSHCLIHelper()

instance_ref = flags.SSH_INSTANCE_RESOLVER.ResolveResources(
        [args.instance_name],
        scope.ScopeEnum.ZONE,
        args.zone,
        holder.resources,
        scope_lister=flags.GetInstanceZoneScopeLister(client))[0]
    return instance_ref, ssh_helper.GetInstance(client, instance_ref)

def _GetLocalHostPort(self, args):
    local_host_arg = args.local_host_port.host or 'localhost'
    port_arg = (
        int(args.local_host_port.port) if args.local_host_port.port else 0)
    local_port = iap_tunnel.DetermineLocalPort(port_arg=port_arg)
    if not port_arg:
      log.status.Print('Picking local unused port [%d].' % local_port)
    return local_host_arg, local_port

def _CheckNumpyInstalled(self):
    # Check if user has numpy installed, show message asking them to install.
    # Numpy will be used later inside the websocket library to speed up the
    # transfer rate. Showing the message here before the process start looks
    # better than showing when the actual import happen inside the websocket.
    try:
      import numpy  # pylint: disable=g-import-not-at-top, unused-import
    except ImportError:
      log.warning(_NUMPY_HELP_TEXT)

@base.UniverseCompatible
@base.ReleaseTracks(base.ReleaseTrack.BETA)
class StartIapTunnelBeta(StartIapTunnel):
  """Starts an IAP TCP forwarding tunnel (Beta)."""
  # Make the Compute Engine instances.Get call only after failing to connect.
  fetch_instance_after_connect_error = True

@base.UniverseCompatible
@base.ReleaseTracks(base.ReleaseTrack.ALPHA)
class StartIapTunnelAlpha(StartIapTunnelBeta):
  """Starts an IAP TCP forwarding tunnel (Beta)."""
  support_security_gateway = True

StartIapTunnelAlpha.detailed_help = _DetailedHelp()
StartIapTunnelBeta.detailed_help = _DetailedHelp()
StartIapTunnel.detailed_help = _DetailedHelp()