### CI Link

https://gradle-enterprise.elastic.co/s/mcboq4te6p7o6

### Repro line

./gradlew :plugins:discovery-gce:qa:gce:check -Dtests.fips.enabled=true

### Does it reproduce?

Yes

### Applicable branches

master

### Failure history

_No response_

### Failure excerpt

This seems to have started failing since #85132

```
[2022-04-12T17:07:29,829][WARN ][o.e.c.g.GceInstancesServiceImpl] [yamlRestTest-1] unable to resolve default zone from metadata server for GCE discovery service
  java.security.KeyStoreException: Uninitialized keystore
       at java.security.KeyStore.size(KeyStore.java:1296) ~[?:?]
       at org.bouncycastle.jsse.provider.ProvTrustManagerFactorySpi.getTrustAnchors(ProvTrustManagerFactorySpi.java:227) ~[bctls-fips-1.0.9.jar:1.0.9]
       at org.bouncycastle.jsse.provider.ProvTrustManagerFactorySpi.engineInit(ProvTrustManagerFactorySpi.java:163) ~[bctls-fips-1.0.9.jar:1.0.9]
       at javax.net.ssl.TrustManagerFactory.init(TrustManagerFactory.java:282) ~[?:?]
       at com.google.api.client.util.SslUtils.initSslContext(SslUtils.java:107) ~[google-http-client-1.41.1.jar:1.41.1]
```
plugins/discovery-gce/src/main/java/org/elasticsearch/cloud/gce/GceInstancesServiceImpl.java
/*
 * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
 * or more contributor license agreements. Licensed under the Elastic License
 * 2.0 and the Server Side Public License, v 1; you may not use this file except
 * in compliance with, at your election, the Elastic License 2.0 or the Server
 * Side Public License, v 1.
 */
package org.elasticsearch.cloud.gce;
import com.google.api.client.googleapis.compute.ComputeCredential;
import com.google.api.client.googleapis.javanet.GoogleNetHttpTransport;
import com.google.api.client.http.GenericUrl;
import com.google.api.client.http.HttpHeaders;