Skip to content

feat: port secure_context testing support to executor proxy#13522

Merged
olavloite merged 3 commits into
googleapis:mainfrom
aseering:secure-parameters-port
Jul 8, 2026
Merged

feat: port secure_context testing support to executor proxy#13522
olavloite merged 3 commits into
googleapis:mainfrom
aseering:secure-parameters-port

Conversation

@aseering

Copy link
Copy Markdown
Contributor

Add support for our executor proxy, so that tools can drive tests/etc using secure parameters

@aseering
aseering requested review from a team as code owners June 18, 2026 21:14
@google-cla

google-cla Bot commented Jun 18, 2026

Copy link
Copy Markdown

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces secure context parameters to query actions in the Spanner executor, adding a secure_context map to the QueryAction proto and implementing helper methods in CloudClientExecutor to apply these options. The review feedback highlights a critical syntax error in the proto file (a stray 'n' character), warns against manually editing auto-generated Java files which should instead be regenerated via the protobuf compiler, and suggests correcting a typo in an exception message.

} else if (entry.getValue().getValueTypeCase() == com.google.spanner.executor.v1.Value.ValueTypeCase.STRING_VALUE) {
valueBuilder.setStringValue(entry.getValue().getStringValue());
} else {
throw new IllegalArgumentException("Unsupported secure parameter value type in GitHub proxy");

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

There is a typo in the exception message: 'GitHub proxy' should be 'executor proxy' to match the context of this executor proxy tool.

Suggested change
throw new IllegalArgumentException("Unsupported secure parameter value type in GitHub proxy");
throw new IllegalArgumentException("Unsupported secure parameter value type in executor proxy");

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This text is already used elsewhere. I think we want to keep the code in sync. If a reviewer with broader context thinks this is worthwhile, please ping here and I'll make the change in both locations.

@aseering
aseering force-pushed the secure-parameters-port branch from 35118d0 to a2ae04a Compare June 18, 2026 21:16
@aseering aseering removed their assignment Jun 18, 2026
@aseering
aseering force-pushed the secure-parameters-port branch 2 times, most recently from afe27a7 to 02b781f Compare June 18, 2026 21:53
@aseering
aseering force-pushed the secure-parameters-port branch from 02b781f to 7819aba Compare June 26, 2026 03:22
@aseering
aseering force-pushed the secure-parameters-port branch 2 times, most recently from d2d441e to 6f32743 Compare July 6, 2026 16:20
@aseering
aseering force-pushed the secure-parameters-port branch from f35ddce to aa8400b Compare July 6, 2026 20:32
}
sender.initForQuery();
List<Options.QueryOption> queryOptions = new ArrayList<>();
queryOptions.add(Options.tag("dml-transaction-tag"));

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: this is also translated to a request_tag, not a transaction_tag. (But in this case, I can see that it is an existing flaw in the code, so feel free to leave as-is)

@aseering
aseering force-pushed the secure-parameters-port branch from aa8400b to 3627eae Compare July 7, 2026 13:04
@aseering
aseering force-pushed the secure-parameters-port branch from 3627eae to 4bb6869 Compare July 7, 2026 16:11
@aseering
aseering force-pushed the secure-parameters-port branch from 9b3c989 to a5b1829 Compare July 7, 2026 17:25
@olavloite
olavloite merged commit 0f81bf0 into googleapis:main Jul 8, 2026
228 of 229 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants