Revert "operator: use GCP REST API for instance templates (#3361)"

This reverts commit effb086.

go.mod

@@ -265,7 +265,7 @@ require (
 	github.com/google/pprof v0.0.0-20241029153458-d1b30febd7db // indirect
 	github.com/google/s2a-go v0.1.8 // indirect
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
-	github.com/googleapis/enterprise-certificate-proxy v0.3.4 // indirect
+	github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
 	github.com/gorilla/mux v1.8.1 // indirect
 	github.com/gorilla/websocket v1.5.0 // indirect
 	github.com/gosuri/uitable v0.0.4 // indirect

operators/constellation-node-operator/internal/cloud/gcp/client/BUILD.bazel

@@ -29,7 +29,6 @@ go_library(
         "@com_github_spf13_afero//:afero",
         "@com_google_cloud_go_compute//apiv1",
         "@com_google_cloud_go_compute//apiv1/computepb",
-        "@org_golang_google_api//compute/v1:compute",
         "@org_golang_google_api//googleapi",
         "@org_golang_google_api//iterator",
         "@org_golang_google_protobuf//proto",
@@ -62,7 +61,6 @@ go_test(
         "@com_github_stretchr_testify//require",
         "@com_google_cloud_go_compute//apiv1",
         "@com_google_cloud_go_compute//apiv1/computepb",
-        "@org_golang_google_api//compute/v1:compute",
         "@org_golang_google_api//googleapi",
         "@org_golang_google_api//iterator",
         "@org_golang_google_protobuf//proto",

operators/constellation-node-operator/internal/cloud/gcp/client/api.go

@@ -12,7 +12,6 @@ import (
 	compute "cloud.google.com/go/compute/apiv1"
 	"cloud.google.com/go/compute/apiv1/computepb"
 	"github.com/googleapis/gax-go/v2"
-	computeREST "google.golang.org/api/compute/v1"
 )
 
 type projectAPI interface {
@@ -28,9 +27,13 @@ type instanceAPI interface {
 }
 
 type instanceTemplateAPI interface {
-	Get(projectID, template string) (*computeREST.InstanceTemplate, error)
-	Delete(projectID, template string) (*computeREST.Operation, error)
-	Insert(projectID string, template *computeREST.InstanceTemplate) (*computeREST.Operation, error)
+	Close() error
+	Get(ctx context.Context, req *computepb.GetInstanceTemplateRequest,
+		opts ...gax.CallOption) (*computepb.InstanceTemplate, error)
+	Delete(ctx context.Context, req *computepb.DeleteInstanceTemplateRequest,
+		opts ...gax.CallOption) (Operation, error)
+	Insert(ctx context.Context, req *computepb.InsertInstanceTemplateRequest,
+		opts ...gax.CallOption) (Operation, error)
 }
 
 type instanceGroupManagersAPI interface {

operators/constellation-node-operator/internal/cloud/gcp/client/client.go

@@ -14,7 +14,6 @@ import (
 
 	compute "cloud.google.com/go/compute/apiv1"
 	"github.com/spf13/afero"
-	computeREST "google.golang.org/api/compute/v1"
 )
 
 // Client is a client for the Google Compute Engine.
@@ -49,17 +48,12 @@ func New(ctx context.Context, configPath string) (*Client, error) {
 		return nil, err
 	}
 	closers = append(closers, insAPI)
-
-	// TODO(msanft): Go back to protobuf-based API when it supports setting
-	// a confidential instance type.
-	// See https://github.com/googleapis/google-cloud-go/issues/10873 for the current status.
-	restClient, err := computeREST.NewService(ctx)
+	templAPI, err := compute.NewInstanceTemplatesRESTClient(ctx)
 	if err != nil {
 		_ = closeAll(closers)
 		return nil, err
 	}
-	templAPI := computeREST.NewInstanceTemplatesService(restClient)
-
+	closers = append(closers, templAPI)
 	groupAPI, err := compute.NewInstanceGroupManagersRESTClient(ctx)
 	if err != nil {
 		_ = closeAll(closers)
@@ -87,6 +81,7 @@ func (c *Client) Close() error {
 	closers := []closer{
 		c.projectAPI,
 		c.instanceAPI,
+		c.instanceTemplateAPI,
 		c.instanceGroupManagersAPI,
 		c.diskAPI,
 	}

operators/constellation-node-operator/internal/cloud/gcp/client/client_test.go

@@ -12,7 +12,6 @@ import (
 	compute "cloud.google.com/go/compute/apiv1"
 	"cloud.google.com/go/compute/apiv1/computepb"
 	"github.com/googleapis/gax-go/v2"
-	computeREST "google.golang.org/api/compute/v1"
 	"google.golang.org/api/iterator"
 	"google.golang.org/protobuf/proto"
 )
@@ -48,7 +47,7 @@ func (a stubInstanceAPI) Get(_ context.Context, _ *computepb.GetInstanceRequest,
 }
 
 type stubInstanceTemplateAPI struct {
-	template  *computeREST.InstanceTemplate
+	template  *computepb.InstanceTemplate
 	getErr    error
 	deleteErr error
 	insertErr error
@@ -58,16 +57,30 @@ func (a stubInstanceTemplateAPI) Close() error {
 	return nil
 }
 
-func (a stubInstanceTemplateAPI) Get(_, _ string) (*computeREST.InstanceTemplate, error) {
+func (a stubInstanceTemplateAPI) Get(_ context.Context, _ *computepb.GetInstanceTemplateRequest,
+	_ ...gax.CallOption,
+) (*computepb.InstanceTemplate, error) {
 	return a.template, a.getErr
 }
 
-func (a stubInstanceTemplateAPI) Delete(_, _ string) (*computeREST.Operation, error) {
-	return &computeREST.Operation{}, a.deleteErr
+func (a stubInstanceTemplateAPI) Delete(_ context.Context, _ *computepb.DeleteInstanceTemplateRequest,
+	_ ...gax.CallOption,
+) (Operation, error) {
+	return &stubOperation{
+		&computepb.Operation{
+			Name: proto.String("name"),
+		},
+	}, a.deleteErr
 }
 
-func (a stubInstanceTemplateAPI) Insert(_ string, _ *computeREST.InstanceTemplate) (*computeREST.Operation, error) {
-	return &computeREST.Operation{}, a.insertErr
+func (a stubInstanceTemplateAPI) Insert(_ context.Context, _ *computepb.InsertInstanceTemplateRequest,
+	_ ...gax.CallOption,
+) (Operation, error) {
+	return &stubOperation{
+		&computepb.Operation{
+			Name: proto.String("name"),
+		},
+	}, a.insertErr
 }
 
 type stubInstanceGroupManagersAPI struct {

operators/constellation-node-operator/internal/cloud/gcp/client/gcpwrappers.go

@@ -12,27 +12,26 @@ import (
 	compute "cloud.google.com/go/compute/apiv1"
 	"cloud.google.com/go/compute/apiv1/computepb"
 	"github.com/googleapis/gax-go/v2"
-	computeREST "google.golang.org/api/compute/v1"
 )
 
 type instanceTemplateClient struct {
-	*computeREST.InstanceTemplatesService
+	*compute.InstanceTemplatesClient
 }
 
 func (c *instanceTemplateClient) Close() error {
-	return nil // no-op
+	return c.InstanceTemplatesClient.Close()
 }
 
-func (c *instanceTemplateClient) Get(project, template string) (*computeREST.InstanceTemplate, error) {
-	return c.InstanceTemplatesService.Get(project, template).Do()
-}
-
-func (c *instanceTemplateClient) Delete(project, template string) (*computeREST.Operation, error) {
-	return c.InstanceTemplatesService.Delete(project, template).Do()
+func (c *instanceTemplateClient) Delete(ctx context.Context, req *computepb.DeleteInstanceTemplateRequest,
+	opts ...gax.CallOption,
+) (Operation, error) {
+	return c.InstanceTemplatesClient.Delete(ctx, req, opts...)
 }
 
-func (c *instanceTemplateClient) Insert(projectID string, template *computeREST.InstanceTemplate) (*computeREST.Operation, error) {
-	return c.InstanceTemplatesService.Insert(projectID, template).Do()
+func (c *instanceTemplateClient) Insert(ctx context.Context, req *computepb.InsertInstanceTemplateRequest,
+	opts ...gax.CallOption,
+) (Operation, error) {
+	return c.InstanceTemplatesClient.Insert(ctx, req, opts...)
 }
 
 type instanceGroupManagersClient struct {

operators/constellation-node-operator/internal/cloud/gcp/client/scalinggroup.go

@@ -16,7 +16,6 @@ import (
 	"github.com/edgelesssys/constellation/v2/internal/constants"
 	updatev1alpha1 "github.com/edgelesssys/constellation/v2/operators/constellation-node-operator/api/v1alpha1"
 	cspapi "github.com/edgelesssys/constellation/v2/operators/constellation-node-operator/internal/cloud/api"
-	computeREST "google.golang.org/api/compute/v1"
 	"google.golang.org/api/iterator"
 )
 
@@ -50,22 +49,29 @@ func (c *Client) SetScalingGroupImage(ctx context.Context, scalingGroupID, image
 	}
 
 	// clone template with desired image
-	if instanceTemplate.Name == "" {
+	if instanceTemplate.Name == nil {
 		return fmt.Errorf("instance template of scaling group %q has no name", scalingGroupID)
 	}
-	instanceTemplate.Properties.Disks[0].InitializeParams.SourceImage = imageURI
-	newTemplateName, err := generateInstanceTemplateName(instanceTemplate.Name)
+	instanceTemplate.Properties.Disks[0].InitializeParams.SourceImage = &imageURI
+	newTemplateName, err := generateInstanceTemplateName(*instanceTemplate.Name)
 	if err != nil {
 		return err
 	}
-	instanceTemplate.Name = newTemplateName
-	if _, err := c.instanceTemplateAPI.Insert(project, instanceTemplate); err != nil {
+	instanceTemplate.Name = &newTemplateName
+	op, err := c.instanceTemplateAPI.Insert(ctx, &computepb.InsertInstanceTemplateRequest{
+		Project:                  project,
+		InstanceTemplateResource: instanceTemplate,
+	})
+	if err != nil {
 		return fmt.Errorf("cloning instance template: %w", err)
 	}
+	if err := op.Wait(ctx); err != nil {
+		return fmt.Errorf("waiting for cloned instance template: %w", err)
+	}
 
 	newTemplateURI := joinInstanceTemplateURI(project, newTemplateName)
 	// update instance group manager to use new template
-	op, err := c.instanceGroupManagersAPI.SetInstanceTemplate(ctx, &computepb.SetInstanceTemplateInstanceGroupManagerRequest{
+	op, err = c.instanceGroupManagersAPI.SetInstanceTemplate(ctx, &computepb.SetInstanceTemplateInstanceGroupManagerRequest{
 		InstanceGroupManager: instanceGroupName,
 		Project:              project,
 		Zone:                 zone,
@@ -129,7 +135,10 @@ func (c *Client) ListScalingGroups(ctx context.Context, uid string) ([]cspapi.Sc
 			if len(templateURI) < 1 {
 				continue // invalid template URI
 			}
-			template, err := c.instanceTemplateAPI.Get(c.projectID, templateURI[len(templateURI)-1])
+			template, err := c.instanceTemplateAPI.Get(ctx, &computepb.GetInstanceTemplateRequest{
+				Project:          c.projectID,
+				InstanceTemplate: templateURI[len(templateURI)-1],
+			})
 			if err != nil {
 				retErr = errors.Join(retErr, fmt.Errorf("getting instance template %q: %w", templateURI[len(templateURI)-1], err))
 				continue
@@ -190,7 +199,7 @@ func (c *Client) ListScalingGroups(ctx context.Context, uid string) ([]cspapi.Sc
 	return results, nil
 }
 
-func (c *Client) getScalingGroupTemplate(ctx context.Context, scalingGroupID string) (*computeREST.InstanceTemplate, error) {
+func (c *Client) getScalingGroupTemplate(ctx context.Context, scalingGroupID string) (*computepb.InstanceTemplate, error) {
 	project, zone, instanceGroupName, err := splitInstanceGroupID(scalingGroupID)
 	if err != nil {
 		return nil, err
@@ -210,19 +219,22 @@ func (c *Client) getScalingGroupTemplate(ctx context.Context, scalingGroupID str
 	if err != nil {
 		return nil, fmt.Errorf("splitting instance template name: %w", err)
 	}
-	instanceTemplate, err := c.instanceTemplateAPI.Get(instanceTemplateProject, instanceTemplateName)
+	instanceTemplate, err := c.instanceTemplateAPI.Get(ctx, &computepb.GetInstanceTemplateRequest{
+		InstanceTemplate: instanceTemplateName,
+		Project:          instanceTemplateProject,
+	})
 	if err != nil {
 		return nil, fmt.Errorf("getting instance template %q: %w", instanceTemplateName, err)
 	}
 	return instanceTemplate, nil
 }
 
-func instanceTemplateSourceImage(instanceTemplate *computeREST.InstanceTemplate) (string, error) {
+func instanceTemplateSourceImage(instanceTemplate *computepb.InstanceTemplate) (string, error) {
 	if instanceTemplate.Properties == nil ||
 		len(instanceTemplate.Properties.Disks) == 0 ||
 		instanceTemplate.Properties.Disks[0].InitializeParams == nil ||
-		instanceTemplate.Properties.Disks[0].InitializeParams.SourceImage == "" {
+		instanceTemplate.Properties.Disks[0].InitializeParams.SourceImage == nil {
 		return "", errors.New("instance template has no source image")
 	}
-	return uriNormalize(instanceTemplate.Properties.Disks[0].InitializeParams.SourceImage), nil
+	return uriNormalize(*instanceTemplate.Properties.Disks[0].InitializeParams.SourceImage), nil
 }