Undeploy an API without having to delete the Host

golem-test-framework/src/components/worker_service/mod.rs

@@ -1247,6 +1247,18 @@ pub trait WorkerService: WorkerServiceInternal {
     }
 
     async fn kill(&self);
+
+    async fn undeploy_api(&self, site: &str, id: &str, version: &str) -> crate::Result<()> {
+        match self.api_deployment_client() {
+            ApiDeploymentServiceClient::Grpc => not_available_on_grpc_api("undeploy_api"),
+            ApiDeploymentServiceClient::Http(client) => {
+                match client.undeploy_api(site, id, version).await {
+                    Ok(_) => Ok(()),
+                    Err(error) => Err(anyhow!("{error:?}")),
+                }
+            }
+        }
+    }
 }
 
 async fn new_worker_grpc_client(host: &str, grpc_port: u16) -> WorkerServiceGrpcClient<Channel> {

golem-worker-service-base/src/service/gateway/api_deployment.rs

@@ -53,6 +53,7 @@ pub trait ApiDeploymentService<AuthCtx, Namespace> {
     async fn undeploy(
         &self,
         deployment: &ApiDeploymentRequest<Namespace>,
+        auth_ctx: &AuthCtx,
     ) -> Result<(), ApiDeploymentError<Namespace>>;
 
     // Example: A newer version of API definition is in dev site, and older version of the same definition-id is in prod site.
@@ -419,16 +420,19 @@ impl<Namespace: GolemNamespace, AuthCtx: GolemAuthCtx> ApiDeploymentService<Auth
     async fn undeploy(
         &self,
         deployment: &ApiDeploymentRequest<Namespace>,
+        auth_ctx: &AuthCtx,
     ) -> Result<(), ApiDeploymentError<Namespace>> {
         info!(namespace = %deployment.namespace, "Undeploying API definitions");
-        // Existing deployment
+
+        // 1. Get existing deployment records
         let existing_deployment_records = self
             .deployment_repo
             .get_by_site(&deployment.site.to_string())
             .await?;
 
         let mut remove_deployment_records: Vec<ApiDeploymentRecord> = vec![];
 
+        // 2. Filter records that match the API definition keys to undeploy
         for deployment_record in existing_deployment_records {
             if deployment_record.namespace != deployment.namespace.to_string()
                 || deployment_record.subdomain != deployment.site.subdomain
@@ -457,10 +461,32 @@ impl<Namespace: GolemNamespace, AuthCtx: GolemAuthCtx> ApiDeploymentService<Auth
         }
 
         if !remove_deployment_records.is_empty() {
+            // 3. Get the specific API definitions being undeployed
+            let mut definitions_to_undeploy = Vec::new();
+            for key in &deployment.api_definition_keys {
+                if let Some(definition) = self
+                    .definition_repo
+                    .get(&deployment.namespace.to_string(), &key.id.0, &key.version.0)
+                    .await?
+                {
+                    definitions_to_undeploy.push(
+                        CompiledHttpApiDefinition::try_from(definition).map_err(|e| {
+                            ApiDeploymentError::conversion_error("API definition record", e)
+                        })?,
+                    );
+                }
+            }
+
+            // 4. Remove component constraints
+            self.remove_component_constraints(definitions_to_undeploy, auth_ctx)
+                .await?;
+
+            // 5. Delete deployment records
             self.deployment_repo
                 .delete(remove_deployment_records.clone())
                 .await?;
 
+            // 6. Set undeployed as draft
             self.set_undeployed_as_draft(remove_deployment_records)
                 .await?;
         }

golem-worker-service-base/tests/services_tests.rs

@@ -703,7 +703,10 @@ async fn test_deployment(
     ));
 
     let deployment = get_api_deployment("test.com", None, vec![&def3.id.0]);
-    deployment_service.undeploy(&deployment).await.unwrap();
+    deployment_service
+        .undeploy(&deployment, &EmptyAuthCtx::default())
+        .await
+        .unwrap();
 
     let definitions: Vec<HttpApiDefinition> = deployment_service
         .get_definitions_by_site(

golem-worker-service/src/api/api_deployment.rs

@@ -17,8 +17,9 @@ use golem_service_base::api_tags::ApiTags;
 use golem_service_base::auth::{DefaultNamespace, EmptyAuthCtx};
 use golem_worker_service_base::api::ApiEndpointError;
 use golem_worker_service_base::api::{ApiDeployment, ApiDeploymentRequest};
-use golem_worker_service_base::gateway_api_definition::ApiDefinitionId;
+use golem_worker_service_base::gateway_api_definition::{ApiDefinitionId, ApiVersion};
 use golem_worker_service_base::gateway_api_deployment;
+use golem_worker_service_base::gateway_api_deployment::ApiSite;
 use golem_worker_service_base::gateway_api_deployment::ApiSiteString;
 use golem_worker_service_base::service::gateway::api_definition::ApiDefinitionIdWithVersion;
 use golem_worker_service_base::service::gateway::api_deployment::ApiDeploymentService;
@@ -182,4 +183,102 @@ impl ApiDeploymentApi {
 
         Ok(Json("API deployment deleted".to_string()))
     }
+
+    /// Undeploy a single API definition from a site
+    ///
+    /// Removes a specific API definition (by id and version) from a site without deleting the entire deployment.
+    #[oai(
+        path = "/:site/:id/:version",
+        method = "delete",
+        operation_id = "undeploy_api"
+    )]
+    async fn undeploy_api(
+        &self,
+        site: Path<String>,
+        id: Path<String>,
+        version: Path<String>,
+    ) -> Result<Json<String>, ApiEndpointError> {
+        let record = recorded_http_api_request!(
+            "undeploy_api",
+            site = site.0.clone(),
+            id = id.0.clone(),
+            version = version.0.clone()
+        );
+
+        let response = self
+            .undeploy_api_internal(site.0, id.0, version.0, &EmptyAuthCtx::default())
+            .instrument(record.span.clone())
+            .await;
+        record.result(response)
+    }
+
+    async fn undeploy_api_internal(
+        &self,
+        site: String,
+        id: String,
+        version: String,
+        auth_ctx: &EmptyAuthCtx,
+    ) -> Result<Json<String>, ApiEndpointError> {
+        let namespace = DefaultNamespace::default();
+        let api_definition_key = ApiDefinitionIdWithVersion {
+            id: ApiDefinitionId(id),
+            version: ApiVersion(version),
+        };
+
+        // Split the site string into host and subdomain parts
+        let (host, subdomain) = if let Some(idx) = site.find('.') {
+            let (subdomain, host) = site.split_at(idx);
+            (
+                host.trim_start_matches('.').to_string(),
+                Some(subdomain.to_string()),
+            )
+        } else {
+            (site, None)
+        };
+
+        let api_site = ApiSite { host, subdomain };
+
+        // Check if the site exists
+        let site_exists = self
+            .deployment_service
+            .get_by_site(&ApiSiteString::from(&api_site))
+            .await?
+            .is_some();
+
+        if !site_exists {
+            return Err(ApiEndpointError::not_found(safe(
+                "Site not found".to_string(),
+            )));
+        }
+
+        // Check if the API definition exists
+        let api_definition_exists = self
+            .deployment_service
+            .get_by_id(&namespace, Some(api_definition_key.id.clone()))
+            .await?
+            .iter()
+            .any(|deployment| {
+                deployment.api_definition_keys.iter().any(|key| {
+                    key.id == api_definition_key.id && key.version == api_definition_key.version
+                })
+            });
+
+        if !api_definition_exists {
+            return Err(ApiEndpointError::not_found(safe(
+                "API definition not found".to_string(),
+            )));
+        }
+
+        let api_deployment = gateway_api_deployment::ApiDeploymentRequest {
+            namespace: namespace.clone(),
+            api_definition_keys: vec![api_definition_key],
+            site: api_site,
+        };
+
+        self.deployment_service
+            .undeploy(&api_deployment, auth_ctx)
+            .await?;
+
+        Ok(Json("API definition undeployed from site".to_string()))
+    }
 }

integration-tests/tests/api/api_deployment.rs

@@ -707,3 +707,116 @@ async fn create_api_definition(
         .await
         .unwrap()
 }
+
+#[test]
+#[tracing::instrument]
+async fn undeploy_api_test(deps: &EnvBasedTestDependencies) {
+    let component_id = deps.component("shopping-cart").unique().store().await;
+
+    let api_definition_1 = create_api_definition(
+        deps,
+        &component_id,
+        Uuid::new_v4().to_string(),
+        "1".to_string(),
+        "/api/v1/path-1".to_string(),
+    )
+    .await;
+
+    let api_definition_2 = create_api_definition(
+        deps,
+        &component_id,
+        Uuid::new_v4().to_string(),
+        "2".to_string(),
+        "/api/v2/path-2".to_string(),
+    )
+    .await;
+
+    // Deploy both APIs to the same site
+    deps.worker_service()
+        .create_or_update_api_deployment(ApiDeploymentRequest {
+            api_definitions: vec![
+                ApiDefinitionInfo {
+                    id: api_definition_1.id.as_ref().unwrap().value.clone(),
+                    version: api_definition_1.version.clone(),
+                },
+                ApiDefinitionInfo {
+                    id: api_definition_2.id.as_ref().unwrap().value.clone(),
+                    version: api_definition_2.version.clone(),
+                },
+            ],
+            site: ApiSite {
+                host: "localhost".to_string(),
+                subdomain: Some("undeploy-test".to_string()),
+            },
+        })
+        .await
+        .unwrap();
+
+    // List deployments and check both are present
+    let deployments = deps
+        .worker_service()
+        .list_api_deployments(None)
+        .await
+        .unwrap();
+    check!(deployments
+        .iter()
+        .any(|d| d.api_definitions.contains(&ApiDefinitionInfo {
+            id: api_definition_1.id.as_ref().unwrap().value.clone(),
+            version: api_definition_1.version.clone(),
+        })));
+    check!(deployments
+        .iter()
+        .any(|d| d.api_definitions.contains(&ApiDefinitionInfo {
+            id: api_definition_2.id.as_ref().unwrap().value.clone(),
+            version: api_definition_2.version.clone(),
+        })));
+
+    // Undeploy API 1
+    deps.worker_service()
+        .undeploy_api(
+            "undeploy-test.localhost",
+            &api_definition_1.id.as_ref().unwrap().value,
+            &api_definition_1.version,
+        )
+        .await
+        .unwrap();
+
+    // Verify that API 1 is no longer in the deployments
+    let deployments = deps
+        .worker_service()
+        .list_api_deployments(None)
+        .await
+        .unwrap();
+    check!(!deployments
+        .iter()
+        .any(|d| d.api_definitions.contains(&ApiDefinitionInfo {
+            id: api_definition_1.id.as_ref().unwrap().value.clone(),
+            version: api_definition_1.version.clone(),
+        })));
+
+    // Verify that API 2 is still in the deployments
+    check!(deployments
+        .iter()
+        .any(|d| d.api_definitions.contains(&ApiDefinitionInfo {
+            id: api_definition_2.id.as_ref().unwrap().value.clone(),
+            version: api_definition_2.version.clone(),
+        })));
+
+    // Test undeploying from a non-existent API
+    let result = deps
+        .worker_service()
+        .undeploy_api("subdomain.localhost", "non-existent-id", "1")
+        .await;
+    assert!(result.is_err());
+
+    // Test undeploying from a non-existent site
+    let result = deps
+        .worker_service()
+        .undeploy_api(
+            "non-existent.localhost",
+            &api_definition_2.id.as_ref().unwrap().value,
+            &api_definition_2.version,
+        )
+        .await;
+    assert!(result.is_err());
+}