Yukang-Lian opened a new pull request, #67253:
URL: https://github.com/apache/doris/pull/67253
### What problem does this PR solve?
Issue Number: None
Related PR: None
Problem Summary:
Cloud feature modules can replace the inbound BRPC server starter, but
public Cloud code has no extension points for configuring either:
- FoundationDB network options before the one-time `fdb_setup_network()`
call.
- Peer Meta-Service BRPC channel options before `Channel::Init()`.
This leaves optional TLS modules unable to protect these outbound
connections without introducing feature-specific dependencies into public Cloud
code.
This PR adds a public client-provider contract, an OSS plaintext
implementation, and build-time implementation replacement alongside the
existing Cloud server-starter module split. It invokes the FDB provider before
network setup and the peer Meta-Service provider before channel initialization.
Provider failures abort the corresponding setup instead of silently falling
back to plaintext. It also exposes the FDB peer-certificate constraint setting
needed by a TLS implementation.
### Release note
None
### Check List (For Author)
- Test
- [ ] Regression test
- [x] Unit Test
- `./run-cloud-ut.sh --run
--filter=client_connection_provider_test:ClientConnectionProviderTest.* -j80`
- Cloud ASAN unit-test targets compiled successfully; the focused
test passed 1/1.
- Clang Format 16 and format check passed.
- Clang-Tidy 20.1.8 passed for changed lines with the Cloud ASAN
compilation database.
- `git diff --check` passed.
- [ ] Manual test (add detailed scripts or steps below)
- [ ] No need to test or manual test. Explain why:
- [ ] This is a refactor/code format and no logic has been changed.
- [ ] Previous test can cover this change.
- [ ] No code files have been changed.
- [ ] Other reason
- Behavior changed:
- [x] No. The OSS provider preserves plaintext defaults; optional
feature modules can replace the provider implementation.
- [ ] Yes.
- Does this need documentation?
- [x] No. The change is a source-level extension point and does not
expose TLS in the OSS build.
- [ ] Yes.
### Check List (For Reviewer who merge this PR)
- [ ] Confirm the release note
- [ ] Confirm test cases
- [ ] Confirm document
- [ ] Add branch pick label
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
