用户提供密钥失败的google云平台磁盘加密

我使用Java谷歌客户端API,并集成了我的示例代码来启动谷歌云中的一个新实例。在这里,我只是检查了所有可能的解决方案,但没有成功

 System.out.println("================== Starting New Instance ==================");


    // Create VM Instance object with the required properties.
    Instance instance = new Instance();

    instance.setName(instanceName);
    instance.setMachineType(
        "https://www.googleapis.com/compute/beta/projects/"
        + PROJECT_ID + "/zones/" + ZONE_NAME + "/machineTypes/n1-standard-1");

    // Add Network Interface to be used by VM Instance.
    NetworkInterface ifc = new NetworkInterface();
    ifc.setNetwork("https://www.googleapis.com/compute/beta/projects/" + PROJECT_ID + "/global/networks/default");
    List<AccessConfig> configs = new ArrayList<>();
    AccessConfig config = new AccessConfig();
    config.setType(NETWORK_INTERFACE_CONFIG);
    config.setName(NETWORK_ACCESS_CONFIG);
    configs.add(config);
    ifc.setAccessConfigs(configs);
    instance.setNetworkInterfaces(Collections.singletonList(ifc));



    CustomerEncryptionKey key= new CustomerEncryptionKey();
    key.set("rsaEncryptedKey", "myencryptedKey");
    // Add attached Persistent Disk to be used by VM Instance.
    AttachedDisk disk = new AttachedDisk();
    disk.setBoot(true);
    disk.setAutoDelete(true);
    disk.setType("PERSISTENT");
    disk.setDiskEncryptionKey(key);

    AttachedDiskInitializeParams params = new AttachedDiskInitializeParams();
    // Assign the Persistent Disk the same name as the VM Instance.
    params.setDiskName(instanceName);
    // Specify the source operating system machine image to be used by the VM Instance.
    params.setSourceImage(SOURCE_IMAGE_PREFIX + SOURCE_IMAGE_PATH);
    params.setSourceImageEncryptionKey(key);
    // Specify the disk type as Standard Persistent Disk
    params.setDiskType("https://www.googleapis.com/compute/beta/projects/" + PROJECT_ID + "/zones/"
                       + ZONE_NAME + "/diskTypes/pd-standard");


    disk.setInitializeParams(params);

    instance.setDisks(Collections.singletonList(disk));

    // Initialize the service account to be used by the VM Instance and set the API access scopes.
    ServiceAccount account = new ServiceAccount();
    account.setEmail("default");
    List<String> scopes = new ArrayList<>();
    scopes.add("https://www.googleapis.com/auth/devstorage.full_control");
    scopes.add("https://www.googleapis.com/auth/compute");
    scopes.add("https://www.googleapis.com/auth/servicecontrol");
    scopes.add("https://www.googleapis.com/auth/service.management.readonly");
    scopes.add("https://www.googleapis.com/auth/trace.append");
    scopes.add("https://www.googleapis.com/auth/logging.write");
    account.setScopes(scopes);
    instance.setServiceAccounts(Collections.singletonList(account));

    // Optional - Add a startup script to be used by the VM Instance.
    Metadata meta = new Metadata();
    Metadata.Items item = new Metadata.Items();
    item.setKey("startup-script-url");
    // If you put a script called "vm-startup.sh" in this Google Cloud Storage
    // bucket, it will execute on VM startup.  This assumes you've created a
    // bucket named the same as your PROJECT_ID.
    // For info on creating buckets see: https://cloud.google.com/storage/docs/cloud-console#_creatingbuckets
    item.setValue("gs://" + PROJECT_ID + "/vm-startup.sh");
    meta.setItems(Collections.singletonList(item));
    instance.setMetadata(meta);

    System.out.println(instance.toPrettyString());

    Compute.Instances.Insert insert = compute.instances().insert(PROJECT_ID, ZONE_NAME, instance);
    final HttpHeaders httpHeaders = new HttpHeaders();
    //httpHeaders.set("x-goog-encryption-algorithm", "AES256");
    //httpHeaders.set("x-goog-encryption-key", key);
   // httpHeaders.set("x-goog-copy-source-encryption-algorithm", "AES256");
    httpHeaders.set("x-goog-copy-source-encryption-key", key);
    insert.setRequestHeaders(httpHeaders);

    return insert.execute();

但它抛出了一个错误,我没有提供客户提供的密钥。

400 Bad Request
{
  "code" : 400,
  "errors" : [ {
    "domain" : "global",
    "message" : "'projects/#####/global/images/image-byok' is protected with a customer supplied encryption key, but none was provided.",
    "reason" : "resourceIsEncryptedWithCustomerEncryptionKey"
  } ],
  "message" : "'projects/######/global/images/image-byok' is protected with a customer supplied encryption key, but none was provided."
}
com.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad Request
{
  "code" : 400,
  "errors" : [ {
    "domain" : "global",
    "message" : "'projects/######/global/images/image-byok' is protected with a customer supplied encryption key, but none was provided.",
    "reason" : "resourceIsEncryptedWithCustomerEncryptionKey"
  } ],
  "message" : "'projects/######/global/images/image-byok' is protected with a customer supplied encryption key, but none was provided."
}
    at com.google.api.client.googleapis.json.GoogleJsonResponseException.from(GoogleJsonResponseException.java:150)
    at com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:113)
    at com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:40)
    at com.google.api.client.googleapis.services.AbstractGoogleClientRequest$1.interceptResponse(AbstractGoogleClientRequest.java:321)
    at com.google.api.client.http.HttpRequest.execute(HttpRequest.java:1067)
    at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:419)
    at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:352)
    at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.execute(AbstractGoogleClientRequest.java:469)
    at com.gem.byokGc.ComputeEngineSample.startInstance(ComputeEngineSample.java:294)
    at com.gem.byokGc.ComputeEngineSample.main(ComputeEngineSample.java:162)

有人能帮助我吗?因为我能够通过JSON执行相同的场景。