-
Notifications
You must be signed in to change notification settings - Fork 137
fix: preserve channel configurator for grpc-gcp and add opt-out for gcp OTel metrics #4329
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Summary of ChangesHello @rahul2393, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request addresses two key areas related to gRPC and metrics in the Spanner client library. It ensures that custom channel configurations are correctly maintained when Highlights
Changelog
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
e1f7103 to
639161a
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Code Review
This pull request aims to add an opt-out mechanism for grpc-gcp OpenTelemetry metrics. However, it introduces a critical Denial of Service (DoS) vulnerability due to an infinite recursion bug in the channel configurator logic within GapicSpannerRpc.java. The current implementation incorrectly attempts to retrieve the configurator from the builder inside the lambda, leading to a StackOverflowError and application crash. This can be remediated by capturing the existing configurator in a local variable before defining the new lambda.
google-cloud-spanner/src/main/java/com/google/cloud/spanner/spi/v1/GapicSpannerRpc.java
Outdated
Show resolved
Hide resolved
639161a to
81011f2
Compare
81011f2 to
f36de5a
Compare
SPANNER_DISABLE_GRPC_GCP_OTEL_METRICS.