Skip to content

Conversation

@arithmetic1728
Copy link
Contributor

@arithmetic1728 arithmetic1728 commented Jan 27, 2021

https://google.aip.dev/auth/4114
googlers see go/mtls-python-cloud-core-clients for more details.

Part of the mtls feature is implemented in googleapis/python-cloud-core#75, and will be released as version 1.16.0.

This PR adds the mtls feature to storage client lib. Note that:
(1) if the python-cloud-core version is < 1.16.0, this PR does nothing, it is backward compatible and won't break any current users.
(2) if the user sets GOOGLE_API_USE_CLIENT_CERTIFICATE env var to "true" to trigger mtls, then the PR checks python-cloud-core version. It throws an exception asking the user to bump the version, if the version < 1.16.0. So probably it is a good idea to release python-cloud-core 1.16.0 before merging this PR.
(3) the unit tests work for both python-cloud-core versions, so unit test shouldn't break after the upgrading in the future.
(4) for mtls testing (running internally), we need to skip a couple of system tests:

  • kms/pubsub tests: because the version used doesn't support mtls
  • any tests using service account credentials: because mtls only works with user credentials

@product-auto-label product-auto-label bot added the api: storage Issues related to the googleapis/python-storage API. label Jan 27, 2021
@google-cla google-cla bot added the cla: yes This human has signed the Contributor License Agreement. label Jan 27, 2021
@arithmetic1728 arithmetic1728 changed the title [WIP] feat: add mtls support feat: add mtls support Jan 29, 2021
@arithmetic1728 arithmetic1728 marked this pull request as ready for review January 31, 2021 12:50
@arithmetic1728 arithmetic1728 requested review from a team, busunkim96, frankyn and tswast January 31, 2021 12:50
@frankyn frankyn requested a review from andrewsg February 8, 2021 20:03
@arithmetic1728 arithmetic1728 requested a review from a team as a code owner February 9, 2021 23:38
@arithmetic1728 arithmetic1728 merged commit d35ab35 into master Feb 10, 2021
@arithmetic1728 arithmetic1728 deleted the for_mtls branch February 10, 2021 19:01
cojenco pushed a commit to cojenco/python-storage that referenced this pull request Oct 13, 2021
* feat: add mtls support

* update

* update

* update

* update

* update
cojenco pushed a commit to cojenco/python-storage that referenced this pull request Oct 13, 2021
* feat: add mtls support

* update

* update

* update

* update

* update
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

api: storage Issues related to the googleapis/python-storage API. cla: yes This human has signed the Contributor License Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants