Skip to content

Conversation

@eshitachandwani
Copy link
Member

Original PR: #8343

Per grpc/proposal@master/A87-mtls-spiffe-support.md this feature should be guarded by an environment variable, GRPC_EXPERIMENTAL_XDS_MTLS_SPIFFE

RELEASE NOTES:

  • Add an environment variable GRPC_EXPERIMENTAL_XDS_MTLS_SPIFFE guarding the use of SPIFFE Bundle Maps in MTLS.

* Add flag guarding SPIFFE Bundle provider

* remove the log

* vet

* address PR comments

* add comment

* fix typo

* rename flag

* add test

* vet

* add other flag check

* remove check from watcher

* add tests for new section where the spiffe bundle map file is set to empty string

* vet
@eshitachandwani eshitachandwani added this to the 1.73 Release milestone Jun 5, 2025
@eshitachandwani eshitachandwani added the Type: Security A bug or other problem affecting security label Jun 5, 2025
@codecov
Copy link

codecov bot commented Jun 5, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 82.21%. Comparing base (b610465) to head (338de63).
Report is 2 commits behind head on v1.73.x.

Additional details and impacted files
@@             Coverage Diff             @@
##           v1.73.x    #8382      +/-   ##
===========================================
- Coverage    82.34%   82.21%   -0.14%     
===========================================
  Files          419      419              
  Lines        42015    42021       +6     
===========================================
- Hits         34599    34549      -50     
- Misses        5965     6007      +42     
- Partials      1451     1465      +14     
Files with missing lines Coverage Δ
credentials/tls/certprovider/pemfile/builder.go 100.00% <100.00%> (ø)
internal/xds/bootstrap/tlscreds/bundle.go 90.19% <100.00%> (+3.32%) ⬆️

... and 21 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@eshitachandwani eshitachandwani requested a review from arjan-bal June 5, 2025 06:22
Copy link
Contributor

@arjan-bal arjan-bal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@arjan-bal
Copy link
Contributor

@eshitachandwani is anything pending here?

@eshitachandwani eshitachandwani merged commit ac60db1 into grpc:v1.73.x Jun 5, 2025
23 of 24 checks passed
@eshitachandwani eshitachandwani deleted the cherry-pick-fix-v1.73 branch June 5, 2025 07:49
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Dec 3, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

Type: Security A bug or other problem affecting security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants