Skip to content

Conversation

@eshitachandwani
Copy link
Member

Original PR: #8343

Per grpc/proposal@master/A87-mtls-spiffe-support.md this feature should be guarded by an environment variable, GRPC_EXPERIMENTAL_XDS_MTLS_SPIFFE

RELEASE NOTES:

  • Add an environment variable GRPC_EXPERIMENTAL_XDS_MTLS_SPIFFE guarding the use of SPIFFE Bundle Maps in MTLS.
* Add flag guarding SPIFFE Bundle provider

* remove the log

* vet

* address PR comments

* add comment

* fix typo

* rename flag

* add test

* vet

* add other flag check

* remove check from watcher

* add tests for new section where the spiffe bundle map file is set to empty string

* vet
@eshitachandwani eshitachandwani added this to the 1.73 Release milestone Jun 5, 2025
@eshitachandwani eshitachandwani added the Type: Security A bug or other problem affecting security label Jun 5, 2025
@codecov
Copy link

codecov bot commented Jun 5, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 82.21%. Comparing base (b610465) to head (338de63).
Report is 2 commits behind head on v1.73.x.

Additional details and impacted files
@@             Coverage Diff             @@
##           v1.73.x    #8382      +/-   ##
===========================================
- Coverage    82.34%   82.21%   -0.14%     
===========================================
  Files          419      419              
  Lines        42015    42021       +6     
===========================================
- Hits         34599    34549      -50     
- Misses        5965     6007      +42     
- Partials      1451     1465      +14     
Files with missing lines Coverage Δ
credentials/tls/certprovider/pemfile/builder.go 100.00% <100.00%> (ø)
internal/xds/bootstrap/tlscreds/bundle.go 90.19% <100.00%> (+3.32%) ⬆️

... and 21 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
@eshitachandwani eshitachandwani requested a review from arjan-bal June 5, 2025 06:22
Copy link
Contributor

@arjan-bal arjan-bal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@arjan-bal
Copy link
Contributor

@eshitachandwani is anything pending here?

@eshitachandwani eshitachandwani merged commit ac60db1 into grpc:v1.73.x Jun 5, 2025
23 of 24 checks passed
@eshitachandwani eshitachandwani deleted the cherry-pick-fix-v1.73 branch June 5, 2025 07:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Type: Security A bug or other problem affecting security

3 participants