v3: list-zones: do not send auth header

v3/generator/operations/operations.go

@@ -438,6 +438,9 @@ type RequestTmpl struct {
 	JSONResponseTarget string
 	ContentType        string
 	QueryParams        map[string]string
+	// SkipAuth is true for operations that must be called without credentials
+	// (e.g. list-zones which returns public data and should not trigger IAM enforcement).
+	SkipAuth bool
 }
 
 // serializeRequest serializes the openAPI spec into the request template.
@@ -446,6 +449,7 @@ func serializeRequest(path, httpMethod, funcName string, op *v3.Operation) (*Req
 		Name:        funcName,
 		OperationID: op.OperationId,
 		HTTPMethod:  strings.ToUpper(httpMethod),
+		SkipAuth:    op.OperationId == "list-zones",
 	}
 	p.Comment = renderDoc(op)
 	params := getParameters(op, funcName)

v3/generator/operations/request.tmpl

@@ -32,13 +32,15 @@ func (c Client) {{ .Name }}({{ .Params }}) {{ .ValueReturn }} {
 		return nil, fmt.Errorf("{{ .Name }}: execute request editors: %w", err)
 	}
 
-	if err := c.signRequest(request); err != nil {
-		return nil, fmt.Errorf("{{ .Name }}: sign request: %w", err)
-	}
+        {{ if not .SkipAuth }}
+        if err := c.signRequest(request); err != nil {
+                return nil, fmt.Errorf("{{ .Name }}: sign request: %w", err)
+        }
+        {{ end }}
 
-	if c.trace {
-		dumpRequest(request, "{{ .OperationID }}")
-	}
+        if c.trace {
+                dumpRequest(request, "{{ .OperationID }}")
+        }
 
 	response, err := c.httpClient.Do(request)
 	if err != nil {