Allow creating devices without build api credentials

build/package/host/etc/cvdr.toml

@@ -25,6 +25,12 @@
 # files forever.
 # KeepLogFilesDays = 30
 
+# Source for the Build API credentials to be used on cvd create operations.
+# Possible values are:
+#  - "none": Don't use Build API credentials.
+#  - "injected": Use credentials stored in the server.
+# BuildAPICredentialsSource = "injected"
+
 # The host.GCP section provides default configuration values for hosts created
 # using the GCP Cloud Provider. Other providers will have their own
 # host.<Provider> sections when added.

pkg/app/secrets/empty.go

@@ -17,7 +17,7 @@ package secrets
 const EmptySMType = ""
 
 // A secret manager that always returns empty string.
-type EmptySecretManager struct {}
+type EmptySecretManager struct{}
 
 func NewEmptySecretManager() *EmptySecretManager {
 	return &EmptySecretManager{}
@@ -30,4 +30,3 @@ func (sm *EmptySecretManager) OAuth2ClientID() string {
 func (sm *EmptySecretManager) OAuth2ClientSecret() string {
 	return ""
 }
-

pkg/cli/cli.go

@@ -97,6 +97,7 @@ const (
 	systemImgBuildTargetFlag  = "system_build_target"
 	numInstancesFlag          = "num_instances"
 	autoConnectFlag           = "auto_connect"
+	credentialsSourceFlag     = "credentials_source"
 )
 
 const (
@@ -488,6 +489,8 @@ func cvdCommands(opts *subCommandOpts) []*cobra.Command {
 		"Creates multiple instances with the same artifacts. Only relevant if given a single build source")
 	create.Flags().BoolVar(&createFlags.AutoConnect, autoConnectFlag, true,
 		"Automatically connect through ADB after device is created.")
+	create.Flags().StringVar(&createFlags.BuildAPICredentialsSource, credentialsSourceFlag, opts.InitialConfig.BuildAPICredentialsSource,
+		"Source for the Build API OAuth2 credentials")
 	// Host flags
 	createHostFlags := []struct {
 		ValueRef *string

pkg/cli/cli_test.go

@@ -204,7 +204,8 @@ func TestCommandSucceeds(t *testing.T) {
 				IOStreams: io,
 				Args:      append(test.Args, "--service_url="+serviceURL),
 				InitialConfig: Config{
-					ConnectionControlDir: t.TempDir(),
+					ConnectionControlDir:      t.TempDir(),
+					BuildAPICredentialsSource: "none",
 				},
 				ServiceBuilder: func(opts *client.ServiceOptions) (client.Service, error) {
 					return &fakeService{}, nil

pkg/cli/config.go

@@ -36,12 +36,13 @@ type HostConfig struct {
 }
 
 type Config struct {
-	ServiceURL           string
-	Zone                 string
-	HTTPProxy            string
-	ConnectionControlDir string
-	KeepLogFilesDays     int
-	Host                 HostConfig
+	ServiceURL                string
+	Zone                      string
+	HTTPProxy                 string
+	ConnectionControlDir      string
+	KeepLogFilesDays          int
+	BuildAPICredentialsSource string
+	Host                      HostConfig
 }
 
 func (c *Config) ConnectionControlDirExpanded() string {
@@ -54,8 +55,9 @@ func (c *Config) LogFilesDeleteThreshold() time.Duration {
 
 func BaseConfig() *Config {
 	return &Config{
-		ConnectionControlDir: "~/.cvdr/connections",
-		KeepLogFilesDays:     30, // A default is needed to not keep forever
+		ConnectionControlDir:      "~/.cvdr/connections",
+		KeepLogFilesDays:          30,                    // A default is needed to not keep forever
+		BuildAPICredentialsSource: NoneCredentialsSource, // Default needed because empty string is invalid
 	}
 }
 

pkg/cli/config_test.go

@@ -100,10 +100,11 @@ MachineType = "machine-type-bar"
 	scf := tempFile(t, system)
 	ucf := tempFile(t, user)
 	expected := &Config{
-		ServiceURL:           "service-foo",
-		Zone:                 "zone-bar",
-		KeepLogFilesDays:     0,
-		ConnectionControlDir: "~/.cvdr/connections",
+		ServiceURL:                "service-foo",
+		Zone:                      "zone-bar",
+		KeepLogFilesDays:          0,
+		ConnectionControlDir:      "~/.cvdr/connections",
+		BuildAPICredentialsSource: NoneCredentialsSource,
 		Host: HostConfig{
 			GCP: GCPHostConfig{
 				MachineType:    "machine-type-bar",

pkg/cli/cvd.go

@@ -62,6 +62,11 @@ func NewRemoteCVD(url, host string, cvd *hoapi.CVD) *RemoteCVD {
 	}
 }
 
+const (
+	NoneCredentialsSource     = "none"
+	InjectedCredentialsSource = "injected"
+)
+
 type CreateCVDOpts struct {
 	Host            string
 	MainBuild       hoapi.AndroidCIBuild
@@ -75,7 +80,8 @@ type CreateCVDOpts struct {
 	// Example: https://cs.android.com/android/platform/superproject/main/+/main:device/google/cuttlefish/host/cvd_test_configs/main_phone-main_watch.json;drc=b2e8f4f014abb7f9cb56c0ae199334aacb04542d
 	EnvConfig map[string]interface{}
 	// If true, perform the ADB connection automatically.
-	AutoConnect bool
+	AutoConnect               bool
+	BuildAPICredentialsSource string
 }
 
 func (o *CreateCVDOpts) AdditionalInstancesNum() uint32 {
@@ -86,7 +92,10 @@ func (o *CreateCVDOpts) AdditionalInstancesNum() uint32 {
 }
 
 func createCVD(service client.Service, createOpts CreateCVDOpts, statePrinter *statePrinter) ([]*RemoteCVD, error) {
-	creator := newCVDCreator(service, createOpts, statePrinter)
+	creator, err := newCVDCreator(service, createOpts, statePrinter)
+	if err != nil {
+		return nil, fmt.Errorf("failed to create cvd: %w", err)
+	}
 	cvds, err := creator.Create()
 	if err != nil {
 		return nil, fmt.Errorf("failed to create cvd: %w", err)
@@ -98,18 +107,26 @@ func createCVD(service client.Service, createOpts CreateCVDOpts, statePrinter *s
 	return result, nil
 }
 
+type CredentialsFactory func() string
+
 type cvdCreator struct {
-	service      client.Service
-	opts         CreateCVDOpts
-	statePrinter *statePrinter
+	service            client.Service
+	opts               CreateCVDOpts
+	statePrinter       *statePrinter
+	credentialsFactory CredentialsFactory
 }
 
-func newCVDCreator(service client.Service, opts CreateCVDOpts, statePrinter *statePrinter) *cvdCreator {
-	return &cvdCreator{
-		service:      service,
-		opts:         opts,
-		statePrinter: statePrinter,
+func newCVDCreator(service client.Service, opts CreateCVDOpts, statePrinter *statePrinter) (*cvdCreator, error) {
+	cf, err := credentialsFactoryFromSource(opts.BuildAPICredentialsSource)
+	if err != nil {
+		return nil, err
 	}
+	return &cvdCreator{
+		service:            service,
+		opts:               opts,
+		statePrinter:       statePrinter,
+		credentialsFactory: cf,
+	}, nil
 }
 
 func (c *cvdCreator) Create() ([]*hoapi.CVD, error) {
@@ -150,7 +167,7 @@ func (c *cvdCreator) createCVDFromLocalBuild() ([]*hoapi.CVD, error) {
 		},
 		AdditionalInstancesNum: c.opts.AdditionalInstancesNum(),
 	}
-	res, err := c.service.HostService(c.opts.Host).CreateCVD(&req, client.InjectedCredentials)
+	res, err := c.service.HostService(c.opts.Host).CreateCVD(&req, c.credentialsFactory())
 	if err != nil {
 		return nil, err
 	}
@@ -175,7 +192,7 @@ func (c *cvdCreator) createWithCanonicalConfig() ([]*hoapi.CVD, error) {
 		EnvConfig: c.opts.EnvConfig,
 	}
 	c.statePrinter.Print(stateMsgFetchAndStart)
-	res, err := c.service.HostService(c.opts.Host).CreateCVD(createReq, client.InjectedCredentials)
+	res, err := c.service.HostService(c.opts.Host).CreateCVD(createReq, c.credentialsFactory())
 	c.statePrinter.PrintDone(stateMsgFetchAndStart, err)
 	if err != nil {
 		return nil, err
@@ -199,7 +216,7 @@ func (c *cvdCreator) createWithOpts() ([]*hoapi.CVD, error) {
 		AndroidCIBundle: &hoapi.AndroidCIBundle{Build: mainBuild, Type: hoapi.MainBundleType},
 	}
 	c.statePrinter.Print(stateMsgFetchMainBundle)
-	fetchMainBuildRes, err := c.service.HostService(c.opts.Host).FetchArtifacts(fetchReq, client.InjectedCredentials)
+	fetchMainBuildRes, err := c.service.HostService(c.opts.Host).FetchArtifacts(fetchReq, c.credentialsFactory())
 	c.statePrinter.PrintDone(stateMsgFetchMainBundle, err)
 	if err != nil {
 		return nil, err
@@ -218,14 +235,25 @@ func (c *cvdCreator) createWithOpts() ([]*hoapi.CVD, error) {
 		AdditionalInstancesNum: c.opts.AdditionalInstancesNum(),
 	}
 	c.statePrinter.Print(stateMsgStartCVD)
-	res, err := c.service.HostService(c.opts.Host).CreateCVD(createReq, client.InjectedCredentials)
+	res, err := c.service.HostService(c.opts.Host).CreateCVD(createReq, c.credentialsFactory())
 	c.statePrinter.PrintDone(stateMsgStartCVD, err)
 	if err != nil {
 		return nil, err
 	}
 	return res.CVDs, nil
 }
 
+func credentialsFactoryFromSource(source string) (CredentialsFactory, error) {
+	switch source {
+	case NoneCredentialsSource:
+		return func() string { return "" }, nil
+	case InjectedCredentialsSource:
+		return func() string { return client.InjectedCredentials }, nil
+	default:
+		return nil, fmt.Errorf("unknown credentials source: %s", source)
+	}
+}
+
 type cvdListResult struct {
 	Result []*RemoteCVD
 	Error  error