o ;iG@sVddlZddlZddlmZddlmZddlmZmZddlm Z ddl m Z ddl m Z dd lmZdd lmZmZmZdd lmZdd lmZdd lmZddlmZmZddlmZddlm Z m!Z!ddl"m#Z#ddl$m%Z%m&Z&m'Z'dZ(eGdddZ)GdddZ*ee*Z+dddede,e-e-ffddZ.Gdddedd Z/ee/Z0dS)!N) dataclass)datetime)OptionalUnion)Message) classproperty)api_pb2) LoadContext)_get_environment_name_Object live_method)Resolver)is_local)synchronize_api)deprecation_warningwarn_if_passing_namespace)check_object_name) as_timestamptimestamp_to_localized_dt)_Client)AlreadyExistsError InvalidError NotFoundErrorzGthe env_dict argument to Secret has to be a dict[str, Union[str, None]]c@s2eZdZUdZeeed<eed<eeed<dS) SecretInfoz$Information about the Secret object.name created_at created_byN)__name__ __module__ __qualname____doc__rstr__annotations__rr$r$@/home/ubuntu/.local/lib/python3.10/site-packages/modal/secret.pyrs  rc@seZdZdZedddddedeeefdedeed ee d df d d Z eddd dddee dee e efded ee d ejdf ddZedddddededeed ee fddZdS)_SecretManagerz9Namespace with methods for managing named Secret objects.FN)allow_existingenvironment_nameclientrenv_dictr'r(r)returncst|d|durtIdHn|}|rtjntj}tj|t|||d}z |j |IdHWdSt y?|s<YdSw)aCreate a new Secret object. **Examples:** ```python notest contents = {"MY_KEY": "my-value", "MY_OTHER_KEY": "my-other-value"} modal.Secret.objects.create("my-secret", contents) ``` Secrets will be created in the active environment, or another one can be specified: ```python notest modal.Secret.objects.create("my-secret", contents, environment_name="dev") ``` By default, an error will be raised if the Secret already exists, but passing `allow_existing=True` will make the creation attempt a no-op in this case. If the `env_dict` data differs from the existing Secret, it will be ignored. ```python notest modal.Secret.objects.create("my-secret", contents, allow_existing=True) ``` Note that this method does not return a local instance of the Secret. You can use `modal.Secret.from_name` to perform a lookup after creation. Added in v1.1.2. SecretNdeployment_namer(object_creation_typer*) rrfrom_envr&OBJECT_CREATION_TYPE_CREATE_IF_MISSING*OBJECT_CREATION_TYPE_CREATE_FAIL_IF_EXISTSSecretGetOrCreateRequestr stubSecretGetOrCreater)rr*r'r(r)r/reqr$r$r%create*s( & z_SecretManager.create) max_objectscreated_beforer(r)r9r:_Secretcsdur tIdHndurdkrtdgdtdtffdd }|t|IdH} |r7n |d jjjIdH}q4fd d D}durX|dS|S) aReturn a list of hydrated Secret objects. **Examples:** ```python secrets = modal.Secret.objects.list() print([s.name for s in secrets]) ``` Secrets will be retreived from the active environment, or another one can be specified: ```python notest dev_secrets = modal.Secret.objects.list(environment_name="dev") ``` By default, all named Secrets are returned, newest to oldest. It's also possible to limit the number of results and to filter by creation date: ```python secrets = modal.Secret.objects.list(max_objects=10, created_before="2025-01-01") ``` Added in v1.1.2. Nrzmax_objects cannot be negativer:r+csdurdntdt}tj||d}tjt|d}j|IdH}|j t|j |kp?duo?tk}|S)Nd)r9r:)r( pagination) minlenrListPaginationSecretListRequestr r4 SecretListextenditems)r: max_page_sizer=r6respfinishedr)r(rDr9r$r% retrieve_pages "z*_SecretManager.list..retrieve_pageTc s.g|]}tj|j|jdt|jdqS)T)is_another_apprep)r; _new_hydrated secret_idmetadata_reprlabel).0item)r)r(r$r% s z'_SecretManager.list..) rr0rfloatboolrrO creation_infor)r9r:r(r)rIrGsecretsr$rHr%listcs !   z_SecretManager.list) allow_missingr(r)rZcsbztj||d|IdH}Wn ty|sYdSwtj|jd}|jj |IdHdS)aDelete a named Secret. Warning: Deletion is irreversible and will affect any Apps currently using the Secret. **Examples:** ```python notest await modal.Secret.objects.delete("my-secret") ``` Secrets will be deleted from the active environment, or another one can be specified: ```python notest await modal.Secret.objects.delete("my-secret", environment_name="dev") ``` Added in v1.1.2. )r(N)rN) r; from_namehydraterrSecretDeleteRequest object_id_clientr4 SecretDelete)rrZr(r)objr6r$r$r%deletes z_SecretManager.delete)rrr r! staticmethodr"dictrVrrr7intrrbuiltinsrYrbr$r$r$r%r&'s`  8 Cr&instancer; load_contextr*csf|jdurtjtj||j|jd}n tjtj||jd}|jj|IdH}| |j |j|j dS)z:helper method for loaders .from_dict and .from_dotenv etc.N)r/r*app_idr()r/r*r() rirr3+OBJECT_CREATION_TYPE_ANONYMOUS_OWNED_BY_APPr(OBJECT_CREATION_TYPE_EPHEMERALr)r4r5_hydraterNrO)rgrhr*r6rFr$r$r%_load_from_env_dicts rmc@seZdZUdZdZeejed<e de fddZ e dee fddZd eefd d Zdejfd d Zeifdee ee fddfddZedee ddfddZed(ddddeeddfddZeddgddde dee dee deeddf ddZe    d)d e dee e fdeedee d!ede f d"d#Ze    d)d e dee e fdeedee d!ede f d$d%Zedefd&d'ZdS)*r;aSecrets provide a dictionary of environment variables for images. Secrets are a secure way to add credentials and other sensitive information to the containers your functions run in. You can create and edit secrets on [the dashboard](https://modal.com/secrets), or programmatically from Python code. See [the secrets guide page](https://modal.com/docs/guide/secrets) for more information. N _metadatar+cCstSN)r&)clsr$r$r%objectssz_Secret.objectscCs|jSro)_nameselfr$r$r%rsz _Secret.namerOcCs*|rt|tjs J||_|j|_dSdSro) isinstancerSecretMetadatarnrrr)rtrOr$r$r%_hydrate_metadatas  z_Secret._hydrate_metadatacCs|jsJ|jSro)rnrsr$r$r% _get_metadatas z_Secret._get_metadatar*c st|ts ttdd|DtddDs!tttddDs0ttdtdt dt d t t ffd d }d d |d}tj||dt dS)aCreate a secret from a str-str dictionary. Values can also be `None`, which is ignored. Usage: ```python @app.function(secrets=[modal.Secret.from_dict({"FOO": "bar"})]) def run(): print(os.environ["FOO"]) ``` cSsi|] \}}|dur||qSror$rRkvr$r$r% sz%_Secret.from_dict..cs|]}t|tVqdSrorur"rRrzr$r$r% z$_Secret.from_dict..csr}ror~)rRr{r$r$r%rrrtresolverrhexisting_object_idcst||IdHdSro)rm)rtrrhrenv_dict_filteredr$r%_loadsz _Secret.from_dict.._loadzSecret.from_dict([z, z])Thydrate_lazilyload_context_overrides)rurdrENV_DICT_WRONG_TYPE_ERRrDallkeysvaluesr;rr rr"join _from_loaderempty)r*rrLr$rr% from_dicts$ z_Secret.from_dictenv_keysc CsZtr(z tdd|DWSty'}z |jd}td|dd}~wwtiS)z>Create secrets from local environment variables automatically.cSsi|]}|tj|qSr$)osenvironrr$r$r%r|*sz._Secret.from_local_environ..rz+Could not find local environment variable 'z' for Secret.from_local_environN)rr;rKeyErrorargsr)rexc missing_keyr$r$r%from_local_environ"s   z_Secret.from_local_environz.env)filenamer)r)c s<dtdtdtdttffdd }tj|ddt|d d S) aCreate secrets from a .env file automatically. If no argument is provided, it will use the current working directory as the starting point for finding a `.env` file. Note that it does not use the location of the module calling `Secret.from_dotenv`. If called with an argument, it will use that as a starting point for finding `.env` files. In particular, you can call it like this: ```python @app.function(secrets=[modal.Secret.from_dotenv(__file__)]) def run(): print(os.environ["USERNAME"]) # Assumes USERNAME is defined in your .env file ``` This will use the location of the script calling `modal.Secret.from_dotenv` as a starting point for finding the `.env` file. A file named `.env` is expected by default, but this can be overridden with the `filename` keyword argument: ```python @app.function(secrets=[modal.Secret.from_dotenv(filename=".env-dev")]) def run(): ... ``` rtrrhrc szddlm}m}ddlm}Wn tytdwdur<|D]}tj|}tj |r8|} nq%d} n|dd} dd ||  D} t ||| IdHdS) Nr) dotenv_values find_dotenv) _walk_to_rootz_Need the `dotenv` package installed. You can install it by running `pip install python-dotenv`.r8T)usecwdcSsi|] \}}||p dqS)r8r$ryr$r$r%r|jsz6_Secret.from_dotenv.._load..) dotenvrr dotenv.mainr ImportErrorrpathrisfilerDrm) rtrrhrrrrdirname check_path dotenv_pathr*rrr$r%rPs*    z"_Secret.from_dotenv.._loadzSecret.from_dotenv()T)r)r)r;rr rr"r)rrr)rr$rr% from_dotenv3sz_Secret.from_dotenv) namespacer( required_keysr)rr(rc sVt|ddtdtdtdttffdd }t|}tj||dt||d d S) aReference a Secret by its name. In contrast to most other Modal objects, named Secrets must be provisioned from the Dashboard. See other methods for alternate ways of creating a new Secret from code. ```python secret = modal.Secret.from_name("my-secret") @app.function(secrets=[secret]) def run(): ... ``` zmodal.Secret.from_namertrrhrcs@tj|jd}|jj|IdH}||j|j|jdS)N)r.r(r) rr3r(r)r4r5rlrNrO)rtrrhrr6responserrr$r%rsz _Secret.from_name.._loadT)r(r))rrr)rr;rr rr"rPr)rrr(rr)rrLr$rr%r[rs$   z_Secret.from_nameFr. overwritecs&tddt||||||IdHS) mdmd:hidden)i zThe undocumented `modal.Secret.create_deployed` method is deprecated and will be removed in a future release. It can be replaced with `modal.Secret.objects.create`.N)rr;_create_deployed)r.r*rr)r(rr$r$r%create_deployeds  z_Secret.create_deployedc slt|dt|d|durtIdH}|rtj}ntj}tj|t|||d}|j |IdH}|j S)rzmodal.Secret.create_deployedr,Nr-) rrrr0r/OBJECT_CREATION_TYPE_CREATE_OVERWRITE_IF_EXISTSr2r3r r4r5rN) r.r*rr)r(rr/requestrFr$r$r%rs  z_Secret._create_deployedcs0|}|j}t|jp dt|j|jpddS)z+Return information about the Secret object.N)rrr)rxrWrrrrr)rtrOrWr$r$r%infosz _Secret.inforo)NNNF) rrr r!rnrrrvr#rr&rqpropertyr"rrrwrxrcrdrrYrrrr[rVrrr rrr$r$r$r%r;s      "> .    st) type_prefix)1rfr dataclassesrrtypingrrgoogle.protobuf.messager synchronicityr modal_protor _load_contextr _objectr r r _resolverr_runtime.execution_contextr_utils.async_utilsr_utils.deprecationrr_utils.name_utilsr_utils.time_utilsrrr)r exceptionrrrrrr& SecretManagerrdr"rmr;r,r$r$r$r%s8            & x