Secrets: Add config for enabling gRPC client-side load balancing (#111989)

This commit is contained in:
Matheus Macabu
2025-10-20 14:04:59 +02:00
committed by GitHub
parent bd7ee6d602
commit 93af167f9c
7 changed files with 34 additions and 6 deletions
+2
View File
@@ -18,6 +18,7 @@ type SecretsManagerSettings struct {
ConfiguredKMSProviders map[string]map[string]string
GrpcClientEnable bool // Whether to enable the gRPC client. If disabled, it will use the in-process services implementations.
GrpcClientLoadBalancing bool // Whether to enable gRPC client-side load balancing
GrpcServerUseTLS bool // Whether to use TLS when communicating with the gRPC server
GrpcServerTLSSkipVerify bool // Whether to skip TLS verification when communicating with the gRPC server
GrpcServerTLSServerName string // Server name to use for TLS verification
@@ -43,6 +44,7 @@ func (cfg *Cfg) readSecretsManagerSettings() {
cfg.SecretsManagement.CurrentEncryptionProvider = secretsMgmt.Key("encryption_provider").MustString(MisconfiguredProvider)
cfg.SecretsManagement.GrpcClientEnable = secretsMgmt.Key("grpc_client_enable").MustBool(false)
cfg.SecretsManagement.GrpcClientLoadBalancing = secretsMgmt.Key("grpc_client_load_balancing").MustBool(false)
cfg.SecretsManagement.GrpcServerUseTLS = secretsMgmt.Key("grpc_server_use_tls").MustBool(false)
cfg.SecretsManagement.GrpcServerTLSSkipVerify = secretsMgmt.Key("grpc_server_tls_skip_verify").MustBool(false)
cfg.SecretsManagement.GrpcServerTLSServerName = valueAsString(secretsMgmt, "grpc_server_tls_server_name", "")