oci 2.110.2__py3-none-any.whl → 2.112.0__py3-none-any.whl

oci/artifacts/artifacts_client.py

@@ -163,7 +163,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/change_container_repository_compartment.py.html>`__ to see an example of how to use change_container_repository_compartment API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/change_container_repository_compartment.py.html>`__ to see an example of how to use change_container_repository_compartment API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['repositoryId']
@@ -290,7 +290,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/change_repository_compartment.py.html>`__ to see an example of how to use change_repository_compartment API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/change_repository_compartment.py.html>`__ to see an example of how to use change_repository_compartment API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['repositoryId']
@@ -406,7 +406,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/create_container_image_signature.py.html>`__ to see an example of how to use create_container_image_signature API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/create_container_image_signature.py.html>`__ to see an example of how to use create_container_image_signature API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = []
@@ -507,7 +507,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/create_container_repository.py.html>`__ to see an example of how to use create_container_repository API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/create_container_repository.py.html>`__ to see an example of how to use create_container_repository API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = []
@@ -606,7 +606,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/create_repository.py.html>`__ to see an example of how to use create_repository API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/create_repository.py.html>`__ to see an example of how to use create_repository API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = []
@@ -705,7 +705,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/delete_container_image.py.html>`__ to see an example of how to use delete_container_image API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/delete_container_image.py.html>`__ to see an example of how to use delete_container_image API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['imageId']
@@ -813,7 +813,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/delete_container_image_signature.py.html>`__ to see an example of how to use delete_container_image_signature API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/delete_container_image_signature.py.html>`__ to see an example of how to use delete_container_image_signature API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['imageSignatureId']
@@ -921,7 +921,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/delete_container_repository.py.html>`__ to see an example of how to use delete_container_repository API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/delete_container_repository.py.html>`__ to see an example of how to use delete_container_repository API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['repositoryId']
@@ -1031,7 +1031,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/delete_generic_artifact.py.html>`__ to see an example of how to use delete_generic_artifact API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/delete_generic_artifact.py.html>`__ to see an example of how to use delete_generic_artifact API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['artifactId']
@@ -1149,7 +1149,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/delete_generic_artifact_by_path.py.html>`__ to see an example of how to use delete_generic_artifact_by_path API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/delete_generic_artifact_by_path.py.html>`__ to see an example of how to use delete_generic_artifact_by_path API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['repositoryId', 'artifactPath', 'version']
@@ -1259,7 +1259,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/delete_repository.py.html>`__ to see an example of how to use delete_repository API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/delete_repository.py.html>`__ to see an example of how to use delete_repository API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['repositoryId']
@@ -1360,7 +1360,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/get_container_configuration.py.html>`__ to see an example of how to use get_container_configuration API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/get_container_configuration.py.html>`__ to see an example of how to use get_container_configuration API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['compartmentId']
@@ -1458,7 +1458,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/get_container_image.py.html>`__ to see an example of how to use get_container_image API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/get_container_image.py.html>`__ to see an example of how to use get_container_image API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['imageId']
@@ -1561,7 +1561,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/get_container_image_signature.py.html>`__ to see an example of how to use get_container_image_signature API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/get_container_image_signature.py.html>`__ to see an example of how to use get_container_image_signature API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['imageSignatureId']
@@ -1664,7 +1664,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/get_container_repository.py.html>`__ to see an example of how to use get_container_repository API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/get_container_repository.py.html>`__ to see an example of how to use get_container_repository API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['repositoryId']
@@ -1769,7 +1769,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/get_generic_artifact.py.html>`__ to see an example of how to use get_generic_artifact API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/get_generic_artifact.py.html>`__ to see an example of how to use get_generic_artifact API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['artifactId']
@@ -1882,7 +1882,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/get_generic_artifact_by_path.py.html>`__ to see an example of how to use get_generic_artifact_by_path API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/get_generic_artifact_by_path.py.html>`__ to see an example of how to use get_generic_artifact_by_path API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['repositoryId', 'artifactPath', 'version']
@@ -1987,7 +1987,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/get_repository.py.html>`__ to see an example of how to use get_repository API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/get_repository.py.html>`__ to see an example of how to use get_repository API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['repositoryId']
@@ -2167,7 +2167,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/list_container_image_signatures.py.html>`__ to see an example of how to use list_container_image_signatures API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/list_container_image_signatures.py.html>`__ to see an example of how to use list_container_image_signatures API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['compartmentId']
@@ -2376,7 +2376,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/list_container_images.py.html>`__ to see an example of how to use list_container_images API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/list_container_images.py.html>`__ to see an example of how to use list_container_images API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['compartmentId']
@@ -2563,7 +2563,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/list_container_repositories.py.html>`__ to see an example of how to use list_container_repositories API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/list_container_repositories.py.html>`__ to see an example of how to use list_container_repositories API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['compartmentId']
@@ -2746,7 +2746,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/list_generic_artifacts.py.html>`__ to see an example of how to use list_generic_artifacts API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/list_generic_artifacts.py.html>`__ to see an example of how to use list_generic_artifacts API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['compartmentId', 'repositoryId']
@@ -2923,7 +2923,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/list_repositories.py.html>`__ to see an example of how to use list_repositories API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/list_repositories.py.html>`__ to see an example of how to use list_repositories API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['compartmentId']
@@ -3066,7 +3066,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/remove_container_version.py.html>`__ to see an example of how to use remove_container_version API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/remove_container_version.py.html>`__ to see an example of how to use remove_container_version API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['imageId']
@@ -3191,7 +3191,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/restore_container_image.py.html>`__ to see an example of how to use restore_container_image API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/restore_container_image.py.html>`__ to see an example of how to use restore_container_image API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['imageId']
@@ -3307,7 +3307,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/update_container_configuration.py.html>`__ to see an example of how to use update_container_configuration API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/update_container_configuration.py.html>`__ to see an example of how to use update_container_configuration API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['compartmentId']
@@ -3417,7 +3417,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/update_container_image.py.html>`__ to see an example of how to use update_container_image API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/update_container_image.py.html>`__ to see an example of how to use update_container_image API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['imageId']
@@ -3532,7 +3532,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/update_container_image_signature.py.html>`__ to see an example of how to use update_container_image_signature API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/update_container_image_signature.py.html>`__ to see an example of how to use update_container_image_signature API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['imageSignatureId']
@@ -3647,7 +3647,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/update_container_repository.py.html>`__ to see an example of how to use update_container_repository API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/update_container_repository.py.html>`__ to see an example of how to use update_container_repository API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['repositoryId']
@@ -3766,7 +3766,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/update_generic_artifact.py.html>`__ to see an example of how to use update_generic_artifact API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/update_generic_artifact.py.html>`__ to see an example of how to use update_generic_artifact API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['artifactId']
@@ -3891,7 +3891,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/update_generic_artifact_by_path.py.html>`__ to see an example of how to use update_generic_artifact_by_path API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/update_generic_artifact_by_path.py.html>`__ to see an example of how to use update_generic_artifact_by_path API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['repositoryId', 'artifactPath', 'version']
@@ -4008,7 +4008,7 @@ class ArtifactsClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/artifacts/update_repository.py.html>`__ to see an example of how to use update_repository API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/artifacts/update_repository.py.html>`__ to see an example of how to use update_repository API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['repositoryId']

oci/audit/audit_client.py

@@ -138,7 +138,7 @@ class AuditClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/audit/get_configuration.py.html>`__ to see an example of how to use get_configuration API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/audit/get_configuration.py.html>`__ to see an example of how to use get_configuration API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['compartmentId']
@@ -255,7 +255,7 @@ class AuditClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/audit/list_events.py.html>`__ to see an example of how to use list_events API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/audit/list_events.py.html>`__ to see an example of how to use list_events API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['compartmentId', 'startTime', 'endTime']
@@ -350,7 +350,7 @@ class AuditClient(object):
         :rtype: :class:`~oci.response.Response`
 
         :example:
-        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.110.2/audit/update_configuration.py.html>`__ to see an example of how to use update_configuration API.
+        Click `here <https://docs.cloud.oracle.com/en-us/iaas/tools/python-sdk-examples/2.112.0/audit/update_configuration.py.html>`__ to see an example of how to use update_configuration API.
         """
         # Required path and query arguments. These are in camelCase to replace values in service endpoints.
         required_arguments = ['compartmentId']

oci/auth/auth_utils.py

@@ -2,6 +2,7 @@
 # Copyright (c) 2016, 2023, Oracle and/or its affiliates.  All rights reserved.
 # This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
 
+import random
 from oci._vendor import six
 
 
@@ -31,3 +32,18 @@ def sanitize_certificate_string(cert_string):
         .replace('-----BEGIN PUBLIC KEY-----', '') \
         .replace('-----END PUBLIC KEY-----', '') \
         .replace('\n', '')
+
+
+def generate_opc_request_id():
+    client_id = generate_unique_id()
+    stack_id = generate_unique_id()
+    individual_id = generate_unique_id()
+
+    opc_request_id = "{}/{}/{}".format(client_id, stack_id, individual_id)
+    return opc_request_id
+
+
+def generate_unique_id():
+    b = [random.randrange(256) for i in range(16)]
+    hex_string = ''.join(format(x, '02x') for x in b)
+    return hex_string

oci/auth/rpt_path_providers.py

@@ -6,15 +6,20 @@ from __future__ import absolute_import
 import abc
 import os
 import logging
+import time
 
 from oci._vendor import requests
+import oci._vendor.jwt as jwt
 
 from .signers.instance_principals_security_token_signer import InstancePrincipalsSecurityTokenSigner
 
 OCI_RESOURCE_PRINCIPAL_RPT_PATH = "OCI_RESOURCE_PRINCIPAL_RPT_PATH"
 OCI_RESOURCE_PRINCIPAL_RPT_ID = "OCI_RESOURCE_PRINCIPAL_RPT_ID"
+OCI_RESOURCE_PRINCIPAL_RPT_PATH_FOR_LEAF_RESOURCE = "OCI_RESOURCE_PRINCIPAL_RPT_PATH_FOR_LEAF_RESOURCE"
+OCI_RESOURCE_PRINCIPAL_RPT_ID_FOR_LEAF_RESOURCE = "OCI_RESOURCE_PRINCIPAL_RPT_ID_FOR_LEAF_RESOURCE"
 IMDS_PATH_TEMPLATE = "/20180711/resourcePrincipalToken/{id}"
 METADATA_AUTH_HEADERS = {'Authorization': 'Bearer Oracle'}
+OCI_KUBERNETES_SERVICE_ACCOUNT_TOKEN_PATH = "/var/run/secrets/kubernetes.io/serviceaccount/token"
 
 logger = logging.getLogger(__name__)
 
@@ -70,18 +75,27 @@ class ImdsRptPathProvider(AbstractRptPathProvider):
 
 
 class EnvRptPathProvider(AbstractRptPathProvider):
-    def __init__(self):
+    def __init__(self, **kwargs):
         super(EnvRptPathProvider, self).__init__(self.get_path_template())
         self.replacements = self.build_replacements()
+        if kwargs.get("child_resource", False):
+            self.child_resource = True
+        else:
+            self.child_resource = False
 
     def get_replacements(self):
         return self.replacements
 
     def get_path_template(self):
+        if self.child_resource:
+            return os.environ.get(OCI_RESOURCE_PRINCIPAL_RPT_PATH_FOR_LEAF_RESOURCE)
         return os.environ.get(OCI_RESOURCE_PRINCIPAL_RPT_PATH)
 
     def build_replacements(self):
-        rpt_id = os.environ.get(OCI_RESOURCE_PRINCIPAL_RPT_ID)
+        if self.child_resource:
+            rpt_id = os.environ.get(OCI_RESOURCE_PRINCIPAL_RPT_ID_FOR_LEAF_RESOURCE)
+        else:
+            rpt_id = os.environ.get(OCI_RESOURCE_PRINCIPAL_RPT_ID)
         if rpt_id:
             return {'id': rpt_id}
         return None
@@ -102,9 +116,9 @@ class DefaultRptPathProvider(AbstractRptPathProvider):
     This path provider is used when the caller doesn't provide a specific path provider to the resource principals signer
     """
 
-    def __init__(self):
+    def __init__(self, **kwargs):
         logger.debug("A path provider was not specified, using DefaultRptPathProvider")
-        self.env_rpt_path_provider = EnvRptPathProvider()
+        self.env_rpt_path_provider = EnvRptPathProvider(**kwargs)
         self.imds_rpt_path_provider = ImdsRptPathProvider()
         super(DefaultRptPathProvider, self).__init__(self.get_path_template())
         self.replacements = self.build_replacements()
@@ -129,6 +143,34 @@ class DefaultRptPathProvider(AbstractRptPathProvider):
         return self.replacements
 
 
+class DefaultServiceAccountTokenProvider(object):
+    def __init__(self):
+        self.token_path = OCI_KUBERNETES_SERVICE_ACCOUNT_TOKEN_PATH
+
+    def override_sa_token_path(self, new_token_path):
+        self.token_path = new_token_path
+
+    def get_sa_token(self):
+        token_path = os.path.expanduser(self.token_path)
+        with open(token_path, mode="r", encoding="utf-8") as f:
+            sa_token = f.read().strip()
+        is_sa_token_valid = is_valid_sa_token(sa_token)
+        if is_sa_token_valid is False:
+            raise RuntimeError("Service account token at {} has expired".format(self.token_path))
+        return sa_token
+
+
+class SuppliedServiceAccountTokenProvider(object):
+    def __init__(self, token_string):
+        self.token_string = token_string
+
+    def get_sa_token(self):
+        is_sa_token_valid = is_valid_sa_token(self.token_string)
+        if is_sa_token_valid is False:
+            raise RuntimeError("The supplied service account token has expired.")
+        return self.token_string
+
+
 def get_instance_id_from_imds():
     # Get the instance id from the metadata service
     # TODO add error checks to ensure instance_id was retrieved.
@@ -137,3 +179,11 @@ def get_instance_id_from_imds():
     timeout = (10, 60)
     response = requests.get(endpoint, timeout=timeout, headers=METADATA_AUTH_HEADERS)
     return response.text.strip().lower()
+
+
+def is_valid_sa_token(token):
+    decoded_jwt = jwt.decode(jwt=token, verify=False)
+    time_now = int(time.time())
+    if decoded_jwt.get('exp') is None:
+        raise RuntimeError("Service account token does not have an 'exp' field.")
+    return time_now < decoded_jwt['exp']

oci/auth/security_token_container.py

@@ -23,6 +23,10 @@ class SecurityTokenContainer(object):
     def valid_with_jitter(self, jitter=DEFAULT_EXPIRY_JITTER_SECONDS):
         return not self._expired_with_jitter(jitter)
 
+    def valid_with_half_expiration_time(self):
+        valid_duration = self.jwt['exp'] - self.jwt['iat']
+        return not self._expired_with_jitter(valid_duration / 2)
+
     def _expired_with_jitter(self, jitter):
         """
         Checks expiry with some jitter to account for clock skews on the client and also, for

oci/auth/signers/__init__.py

@@ -9,6 +9,8 @@ from .resource_principals_federation_signer import ResourcePrincipalsFederationS
 from .resource_principals_delegation_token_signer import ResourcePrincipalsDelegationTokenSigner  # noqa: F401
 from .ephemeral_resource_principals_signer import EphemeralResourcePrincipalSigner  # noqa: F401
 from .ephemeral_resource_principals_delegation_token_signer import EphemeralResourcePrincipalsDelegationTokenSigner  # noqa: F401
-from .resource_principals_signer import get_resource_principals_signer, get_resource_principal_delegation_token_signer  # noqa: F401
+from .resource_principals_signer import get_resource_principals_signer, get_resource_principal_delegation_token_signer, get_oke_workload_identity_resource_principal_signer  # noqa: F401
+from .oke_workload_identity_resource_principal_signer import OkeWorkloadIdentityResourcePrincipalSigner  # noqa: F401
 from .ephemeral_resource_principals_v21_signer import EphemeralResourcePrincipalV21Signer  # noqa: F401
 from .key_pair_signer import KeyPairSigner  # noqa: F401
+from .nested_resource_principals_signer import NestedResourcePrincipals  # noqa: F401

oci/auth/signers/ephemeral_resource_principals_v21_signer.py

@@ -10,6 +10,8 @@ from cryptography.hazmat.primitives.serialization import Encoding, PublicFormat
 
 import oci
 import oci.signer
+from oci._vendor import requests
+
 from .ephemeral_resource_principals_signer import FixedSessionKeySupplier, FileBasedSessionKeySupplier
 from .key_pair_signer import KeyPairSigner
 from .security_token_signer import SecurityTokenSigner, SECURITY_TOKEN_FORMAT_STRING
@@ -17,11 +19,16 @@ from .. import auth_utils
 from ..security_token_container import SecurityTokenContainer
 
 
+METADATA_URL_BASE = 'http://169.254.169.254/opc/v2'
+GET_REGION_URL = '{}/instance/region'.format(METADATA_URL_BASE)
+METADATA_AUTH_HEADERS = {'Authorization': 'Bearer Oracle'}
+
+
 class EphemeralResourcePrincipalV21Signer(SecurityTokenSigner):
 
     def __init__(self, resource_principal_token_endpoint=None, resource_principal_session_token_endpoint=None,
                  resource_id=None, private_key=None, private_key_passphrase=None, retry_strategy=None,
-                 log_requests=None, generic_headers=None, tenancy_id=None, rp_version=None, **kwargs):
+                 log_requests=None, generic_headers=None, tenancy_id=None, rp_version=None, region=None, **kwargs):
 
         if resource_principal_token_endpoint:
             self.resource_principal_token_endpoint = resource_principal_token_endpoint
@@ -43,6 +50,7 @@ class EphemeralResourcePrincipalV21Signer(SecurityTokenSigner):
             raise ValueError("tenancy_id should be provided")
 
         self._reset_signers_lock = threading.Lock()
+        self.region = self._initialize_and_return_region(region_raw=region)
 
         if retry_strategy:
             self.retry_strategy = retry_strategy
@@ -200,3 +208,25 @@ class EphemeralResourcePrincipalV21Signer(SecurityTokenSigner):
                 header_params=header_params,
                 body=body,
                 response_type=oci.base_client.BYTES_RESPONSE_TYPE)
+
+    def _initialize_and_return_region(self, region_raw=None):
+        if hasattr(self, 'region'):
+            return self.region
+
+        if region_raw is None:
+            try:
+                self.logger.debug("Requesting region information from :{}".format(GET_REGION_URL))
+                response = requests.get(GET_REGION_URL, timeout=(10, 60), headers=METADATA_AUTH_HEADERS)
+                region_raw = response.text.strip().lower()
+            except Exception as ex:
+                self.logger.debug("Got exception: {} while getting region from: {}, setting region as None".format(ex, GET_REGION_URL))
+                region_raw = None
+
+        # The region can be something like "phx" but internally we expect "us-phoenix-1", "us-ashburn-1" etc.
+        if region_raw in oci.regions.REGIONS_SHORT_NAMES:
+            region_to_use = oci.regions.REGIONS_SHORT_NAMES[region_raw]
+        else:
+            region_to_use = region_raw
+
+        self.logger.debug("Region is set to: {}".format(region_to_use))
+        return region_to_use