Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add GCP Financial Services API #43446

Open
wants to merge 32 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
32 commits
Select commit Hold shift + click to select a range
286e38c
add financial services hook
claw89 Oct 21, 2024
8673f7f
add create instance airflow operator
claw89 Oct 21, 2024
e2a0196
add delete and get instance operators
claw89 Oct 21, 2024
44cd7a6
add sensor for long running operations
claw89 Oct 22, 2024
3477b25
allow templated fields in financial services operators
claw89 Oct 22, 2024
3f5abef
add example DAG for financial services
claw89 Oct 22, 2024
ed45f03
add hook unit tests for financial services
claw89 Oct 23, 2024
2994681
add operator unit tests for financial services
claw89 Oct 23, 2024
3ea9891
add sensor unit tests for financial services
claw89 Oct 23, 2024
8eb9a8a
update docstrings by removing args related to googleapi discovery
claw89 Oct 23, 2024
18215a6
add system test for financial services
claw89 Oct 24, 2024
fb6adda
add docs for FinancialServicesCreateInstanceOperator
claw89 Oct 24, 2024
bdf7140
add remaining instance operator docs
claw89 Oct 24, 2024
5027afe
add operation sensor docs
claw89 Oct 24, 2024
6b9fe2e
add discovery doc arg to financial services operators
claw89 Oct 24, 2024
a874878
remove example DAG
claw89 Oct 24, 2024
9b62db0
fix docstrings and refactor
claw89 Oct 25, 2024
9905ecf
Merge branch 'apache:main' into financial-services
claw89 Oct 28, 2024
223eaf2
Merge branch 'apache:main' into financial-services
claw89 Oct 30, 2024
188de90
fix nullable KMS_KEY arg
claw89 Oct 30, 2024
e8f5339
fix documentation
claw89 Oct 30, 2024
02ce717
Merge branch 'apache:main' into financial-services
claw89 Nov 1, 2024
89fa2e7
remove delegate_to deprecation check
claw89 Oct 30, 2024
48ee457
divide resource names into parts in args
claw89 Oct 30, 2024
628b1a5
divide resource names in operators
claw89 Oct 30, 2024
1395315
use google api_core Operation type
claw89 Oct 31, 2024
892db75
replace operation sensor with wait_for_operation method in hook
claw89 Nov 1, 2024
1058c09
update test args
claw89 Nov 1, 2024
fb67fd9
add developer key option for connecting to financial serivces
claw89 Nov 1, 2024
e43f6e5
update unit tests for new connection options
claw89 Nov 1, 2024
cc783fe
update documentation
claw89 Nov 1, 2024
984fa74
Merge branch 'apache:main' into financial-services
claw89 Nov 11, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,129 @@
.. Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements. See the NOTICE file
distributed with this work for additional information
regarding copyright ownership. The ASF licenses this file
to you under the Apache License, Version 2.0 (the
"License"); you may not use this file except in compliance
with the License. You may obtain a copy of the License at

.. http://www.apache.org/licenses/LICENSE-2.0

.. Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied. See the License for the
specific language governing permissions and limitations
under the License.



Google Cloud Financial Services Operators
=========================================

Prerequisite Tasks
^^^^^^^^^^^^^^^^^^

.. include:: /operators/_partials/prerequisite_tasks.rst

Manage instances
^^^^^^^^^^^^^^^^

.. _howto/operator:FinancialServicesCreateInstanceOperator:

Create an AML AI instance
-------------------------

Use the :class:`~airflow.providers.google.cloud.operators.financial_services.FinancialServicesCreateInstanceOperator`
operator to create an AML AI instance in the Google Cloud Financial Services API.

Using the operator
""""""""""""""""""

.. exampleinclude:: /../../providers/tests/system/google/cloud/financial_services/example_financial_services.py
:language: python
:dedent: 4
:start-after: [START howto_operator_financial_services_create_instance]
:end-before: [END howto_operator_financial_services_create_instance]

Templating
""""""""""

.. literalinclude:: /../../providers/src/airflow/providers/google/cloud/operators/financial_services.py
:language: python
:dedent: 4
:start-after: [START howto_operator_financial_services_create_instance_template_fields]
:end-before: [END howto_operator_financial_services_create_instance_template_fields]

More information
""""""""""""""""

See Google Cloud Financial Services API documentation to `create an instance
<https://cloud.google.com/financial-services/anti-money-laundering/docs/reference/rest/v1/projects.locations.instances/create>`_.



.. _howto/operator:FinancialServicesGetInstanceOperator:

Get an AML AI instance
-------------------------

Use the :class:`~airflow.providers.google.cloud.operators.financial_services.FinancialServicesGetInstanceOperator`
operator to get an AML AI instance in the Google Cloud Financial Services API.

Using the operator
""""""""""""""""""

.. exampleinclude:: /../../providers/tests/system/google/cloud/financial_services/example_financial_services.py
:language: python
:dedent: 4
:start-after: [START howto_operator_financial_services_get_instance]
:end-before: [END howto_operator_financial_services_get_instance]

Templating
""""""""""

.. literalinclude:: /../../providers/src/airflow/providers/google/cloud/operators/financial_services.py
:language: python
:dedent: 4
:start-after: [START howto_operator_financial_services_get_instance_template_fields]
:end-before: [END howto_operator_financial_services_get_instance_template_fields]

More information
""""""""""""""""

See Google Cloud Financial Services API documentation to `get an instance
<https://cloud.google.com/financial-services/anti-money-laundering/docs/reference/rest/v1/projects.locations.instances/get>`_.



.. _howto/operator:FinancialServicesDeleteInstanceOperator:

Delete an AML AI instance
-------------------------

Use the :class:`~airflow.providers.google.cloud.operators.financial_services.FinancialServicesDeleteInstanceOperator`
operator to delete an AML AI instance in the Google Cloud Financial Services API.

Using the operator
""""""""""""""""""

.. exampleinclude:: /../../providers/tests/system/google/cloud/financial_services/example_financial_services.py
:language: python
:dedent: 4
:start-after: [START howto_operator_financial_services_delete_instance]
:end-before: [END howto_operator_financial_services_delete_instance]

Templating
""""""""""

.. literalinclude:: /../../providers/src/airflow/providers/google/cloud/operators/financial_services.py
:language: python
:dedent: 4
:start-after: [START howto_operator_financial_services_delete_instance_template_fields]
:end-before: [END howto_operator_financial_services_delete_instance_template_fields]

More information
""""""""""""""""

See Google Cloud Financial Services API documentation to `delete an instance
<https://cloud.google.com/financial-services/anti-money-laundering/docs/reference/rest/v1/projects.locations.instances/delete>`_.
Original file line number Diff line number Diff line change
@@ -0,0 +1,254 @@
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements. See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership. The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied. See the License for the
# specific language governing permissions and limitations
# under the License.
from __future__ import annotations

import json
from pathlib import PurePath

from google.api_core.future import polling
from google.api_core.operation import Operation
from google.longrunning import operations_pb2
from google.protobuf.empty_pb2 import Empty
from google.protobuf.json_format import ParseDict
from googleapiclient.discovery import Resource, build, build_from_document

from airflow.exceptions import AirflowException
from airflow.models import Variable
from airflow.providers.google.common.hooks.base_google import GoogleBaseHook


class FinancialServicesHook(GoogleBaseHook):
"""
Hook for interacting with the Google Financial Services API.

:param gcp_conn_id: Identifier of connection to Google Cloud Platform.
Defaults to "google_cloud_default".
"""

connection: Resource | None = None

def __init__(
self,
gcp_conn_id: str = "google_cloud_default",
**kwargs,
) -> None:
super().__init__(
gcp_conn_id=gcp_conn_id,
impersonation_chain=None,
)

def _get_developer_key(self) -> str | None:
"""
Get a developer key for accessing the Financial Services discovery API.

:return: A developer key for discovery API access.
"""
return Variable.get("financial_services_api_key", default_var=None)

def _get_discovery_doc(self) -> dict | None:
"""
Get the Financial Services discovery document from local storage.

:return: Financial Services discovery document.
"""
discovery_doc_path = Variable.get("financial_services_discovery_doc_path", default_var=None)
if not discovery_doc_path:
discovery_doc = None
else:
with open(discovery_doc_path) as file:
discovery_doc = json.load(file)
return discovery_doc

def get_conn(self) -> Resource:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could we try to download a discovery document for an authorized user? Firstly authorize the user, then download a discovery doc and after that build a connection. Similar to this code for firebase

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The credentials retrieved using GoogleBaseHook don't authenticate the Financial Services; for this service a developer key should be provided due to the API is not currently being publicly General Available. For some use cases, we expect that providing the discovery document may be more feasible than creating and sharing an API key in GCP. However, I agree that having the option to use the developer key could also be useful.

I have made updates to enable users to supply either a developer API key OR a discovery document as a local .json file by setting Airflow variables. An exception will be raised if neither of these variables are set.

"""
Establish a connection to the Google Financial Services API.

:return: A Google Cloud Financial Services API service resource.
"""
if not self.connection:
developer_key = self._get_developer_key()
discovery_doc = self._get_discovery_doc()

if developer_key:
credentials = self.get_credentials()
self.connection = build(
serviceName="financialservices",
version="v1",
developerKey=developer_key,
discoveryServiceUrl="https://financialservices.googleapis.com/$discovery/rest?version=v1",
credentials=credentials,
)
elif discovery_doc:
self.connection = build_from_document(discovery_doc)
else:
raise AirflowException(
"Connecting to financialservices.googleapis.com requires either 'financial_services_api_key' or "
"'financial_services_discovery_doc_path' to be set in Airflow variables. Use 'airflow variables "
"set financial_services_api_key <API KEY VALUE>' to set the variable"
)

return self.connection

def wait_for_operation(self, operation: Operation, timeout: float | None = None):
"""
Wait for the completion of a long-running operation.

:param operation: The long-running operation to wait for completion.
:param timeout: Timeout in seconds to wait for completion.

:return: The result of the operation after completion.
"""
try:
return operation.result(timeout=timeout)
except Exception:
error = operation.exception(timeout=timeout)
raise AirflowException(error)

def get_instance(self, project_id: str, region: str, instance_id: str) -> dict:
"""
Get a Financial Services Anti-Money Laundering AI instance.

:param project_id: Required. The ID of the Google Cloud project that the service belongs to.
:param region: Required. The ID of the Google Cloud region that the service belongs to.
:param instance_id: Required. The ID of the instance, which is used as the final component of the
instances's name.

:returns: A dictionary containing the instance metadata
"""
conn = self.get_conn()
name = f"projects/{project_id}/locations/{region}/instances/{instance_id}"
response = conn.projects().locations().instances().get(name=name).execute()
return response

def create_instance(
self, project_id: str, region: str, instance_id: str, kms_key_ring_id: str, kms_key_id: str
) -> Operation:
"""
Create a Financial Services Anti-Money Laundering AI instance.

:param project_id: Required. The ID of the Google Cloud project that the service belongs to.
:param region: Required. The ID of the Google Cloud region that the service belongs to.
:param instance_id: Required. The ID of the instance, which is used as the final component of the
instances's name.
:param kms_key_ring_id: Required. The ID of the Google Cloud KMS key ring containing the key to
use for instance encryption
:param kms_key_id: Required. The ID of the Google Cloud KMS key to use for instance encryption

:returns: The create instance operation.
"""
conn = self.get_conn()

parent = f"projects/{project_id}/locations/{region}"
kms_key = (
f"projects/{project_id}/locations/{region}/keyRings/{kms_key_ring_id}/cryptoKeys/{kms_key_id}"
)
response = (
conn.projects()
.locations()
.instances()
.create(
parent=parent,
instanceId=instance_id,
body={"kmsKey": kms_key},
)
.execute()
)
operation_id, operation_proto = self._parse_operation_proto(response)

return Operation(
operation=operation_proto,
refresh=lambda: self._get_operation(project_id, region, operation_id),
cancel=lambda: self._cancel_operation(project_id, region, operation_id),
result_type=Empty,
metadata_type=Empty,
polling=polling.DEFAULT_POLLING,
)

def delete_instance(self, project_id: str, region: str, instance_id: str) -> Operation:
"""
Delete a Financial Services Anti-Money Laundering AI instance.

:param project_id: Required. The ID of the Google Cloud project that the service belongs to.
:param region: Required. The ID of the Google Cloud region that the service belongs to.
:param instance_id: Required. The ID of the instance, which is used as the final component of the
instances's name.

:returns: The delete instance operation.
"""
conn = self.get_conn()

name = f"projects/{project_id}/locations/{region}/instances/{instance_id}"
response = conn.projects().locations().instances().delete(name=name).execute()
operation_id, operation_proto = self._parse_operation_proto(response)

return Operation(
operation=operation_proto,
refresh=lambda: self._get_operation(project_id, region, operation_id),
cancel=lambda: self._cancel_operation(project_id, region, operation_id),
result_type=Empty,
metadata_type=Empty,
polling=polling.DEFAULT_POLLING,
)

def _parse_operation_proto(self, json_response: dict) -> tuple[str, operations_pb2.Operation]:
"""
Parse an operation response from a Financial Services API call using operations_pb2.Operation.

:param json_response: Required. Long-running operation data returned from the Financial Services API in JSON format.

:returns: The operation ID and a parsed pb2 operation.
"""
# Can not find message descriptor by type_url: type.googleapis.com/google.cloud.financialservices.v1.OperationMetadata
# replace operation metadata protobuf with Empty
json_response["metadata"] = {"@type": "type.googleapis.com/google.protobuf.Empty"}

if "response" in json_response.keys():
# Can not find message descriptor by type_url: type.googleapis.com/google.cloud.financialservices.v1.Instance
# replace instance protobuf with Empty; response can be parsed, but no instance data can be returned
json_response["response"] = {"@type": "type.googleapis.com/google.protobuf.Empty"}

operation_proto = ParseDict(js_dict=json_response, message=operations_pb2.Operation())
operation_id = PurePath(operation_proto.name).name
return operation_id, operation_proto

def _get_operation(self, project_id: str, region: str, operation_id: str) -> operations_pb2.Operation:
"""
Get a long-running operation.

:param project_id: Required. The ID of the Google Cloud project that the service belongs to.
:param region: Required. The ID of the Google Cloud region that the service belongs to.
:param operation_id: Required. The ID of the long-running operation.

:returns: The parsed pb2 operation.
"""
conn = self.get_conn()
name = f"projects/{project_id}/locations/{region}/operations/{operation_id}"
response = conn.projects().locations().operations().get(name=name).execute()
_, operation_proto = self._parse_operation_proto(response)
return operation_proto

def _cancel_operation(self, project_id: str, region: str, operation_id: str):
"""
Cancel a long-running operation.

:param project_id: Required. The ID of the Google Cloud project that the service belongs to.
:param region: Required. The ID of the Google Cloud region that the service belongs to.
:param operation_id: Required. The ID of the long-running operation.
"""
conn = self.get_conn()
name = f"projects/{project_id}/locations/{region}/operations/{operation_id}"
conn.projects().locations().operations().cancel(name=name).execute()
Loading