# -*- coding: utf-8 -*- #
# Copyright 2025 Google LLC. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
"""Command for creating network policy associations."""

from __future__ import absolute_import
from __future__ import division
from __future__ import unicode_literals

from typing import ClassVar

from googlecloudsdk.api_lib.compute import base_classes
from googlecloudsdk.api_lib.compute.network_policies import client
from googlecloudsdk.calliope import base
from googlecloudsdk.command_lib.compute import flags as compute_flags
from googlecloudsdk.command_lib.compute.network_policies import flags


@base.Hidden
@base.UniverseCompatible
@base.ReleaseTracks(base.ReleaseTrack.ALPHA)
class Create(base.CreateCommand):
  """Create a new association between a network policy and a network.

  *{command}* is used to create network policy associations. A network policy is
  a set of rules that controls access to various resources.
  """

  NETWORK_POLICY_ARG: ClassVar[compute_flags.ResourceArgument]

  @classmethod
  def Args(cls, parser):
    cls.NETWORK_POLICY_ARG = flags.NetworkPolicyAssociationArgument(
        required=True, operation='create association for'
    )
    cls.NETWORK_POLICY_ARG.AddArgument(parser, operation_type='create')
    flags.AddArgsCreateAssociation(parser)
    parser.display_info.AddCacheUpdater(flags.NetworkPoliciesCompleter)

  def Run(self, args):
    holder = base_classes.ComputeApiHolder(self.ReleaseTrack())
    ref = self.NETWORK_POLICY_ARG.ResolveAsResource(args, holder.resources)

    network_policy_client = client.NetworkPolicy(
        ref, compute_client=holder.client
    )

    network_ref = flags.NetworkArgumentForOtherResource(
        'The network to which the network policy attaches.'
    ).ResolveAsResource(args, holder.resources)

    name = args.name or 'network-' + network_ref.Name()
    attachment_target = network_ref.SelfLink()

    association = holder.client.messages.NetworkPolicyAssociation(
        attachmentTarget=attachment_target,
        name=name,
    )

    return network_policy_client.AddAssociation(
        association=association,
        network_policy=args.network_policy,
    )


Create.detailed_help = {
    'EXAMPLES': """\
    To associate a network policy with name ``my-region-policy'' in
    region ``region-a'' to network ``my-network'' with an association
    named ``my-association'', run:

      $ {command}
          --network-policy=my-policy
          --network-policy-region=region-a
          --network=my-network
          --name=my-association
    """,
}
