fix: skip Authorization header for list-zones

.github/workflows/openapi-update-generate-new-sdk.yml

@@ -20,6 +20,27 @@ jobs:
         run: |
           curl -s https://api-ch-gva-2.exoscale.com/v2/openapi.json -o api/openapi.yaml
 
+      - name: Inject vendor extensions into OpenAPI definition
+        shell: bash
+        run: |
+          python3 - <<'EOF'
+          import json
+
+          with open('api/openapi.yaml') as f:
+              spec = json.load(f)
+
+          # list-zones returns public data but the server enforces IAM role policies
+          # on authenticated requests. Restricted keys (e.g. DBaaS-only) get 403.
+          # Mark it with x-skip-auth so the generator omits the Authorization header.
+          for path_item in spec.get('paths', {}).values():
+              for op in path_item.values():
+                  if isinstance(op, dict) and op.get('operationId') == 'list-zones':
+                      op['x-skip-auth'] = True
+
+          with open('api/openapi.yaml', 'w') as f:
+              json.dump(spec, f, separators=(',', ':'))
+          EOF
+
       - name: Check for changes in OpenAPI definition
         id: changes
         run: |

generator/libraries/native/api.mustache

@@ -366,12 +366,17 @@ public class {{classname}} {
   {{/bodyParam}}
 
 
+      // Operations tagged x-skip-auth return public data but the server enforces IAM
+      // role policies on authenticated requests. Restricted keys (e.g. DBaaS-only) get 403.
+      // Skip signing so those requests are always sent without credentials.
+      {{^vendorExtensions.x-skip-auth}}
       try{
       authorizationValue = credentials.generateSignature("{{httpMethod}}", "/v2"+localVarPath , requestBody != null ? requestBody : "");
       } catch (Exception e) {
       throw new ApiException(500, "Failed to generate signature: " + e.getMessage());
       }
       localVarRequestBuilder.header("Authorization", authorizationValue);
+      {{/vendorExtensions.x-skip-auth}}
     {{#hasQueryParams}}
     List<Pair> localVarQueryParams = new ArrayList<>();
     StringJoiner localVarQueryStringJoiner = new StringJoiner("&");

pom.xml

@@ -18,7 +18,7 @@
               <goal>generate</goal>
             </goals>
             <configuration>
-              <inputSpec>https://api-ch-gva-2.exoscale.com/v2/openapi.json</inputSpec>
+              <inputSpec>${project.basedir}/api/openapi.yaml</inputSpec>
               <generatorName>java</generatorName>
               <library>native</library>
               <openapiNormalizer>

sdk/README.md

@@ -7,7 +7,7 @@ Java SDK for interacting with Exoscale Cloud Services.
 
 - API version: 2.0.0
 
-- Build date: 2026-04-18T07:30:19.997697928Z[Etc/UTC]
+- Build date: 2026-04-28T21:12:59.990672440+02:00[Europe/Paris]
 
 
 

sdk/api/openapi.yaml

@@ -1946,6 +1946,7 @@ paths:
       summary: List Zones
       tags:
       - exoscale
+      x-skip-auth: true
       x-accepts: application/json
   /instance-pool:
     get: