Skip to content

fix(auth): Disable MDS mTLS feature by default.#16786

Merged
nolanleastin merged 1 commit intomainfrom
neastin/disable-mds-mtls
Apr 23, 2026
Merged

fix(auth): Disable MDS mTLS feature by default.#16786
nolanleastin merged 1 commit intomainfrom
neastin/disable-mds-mtls

Conversation

@nolanleastin
Copy link
Copy Markdown
Contributor

mTLS connection to MDS is failing after a python update. There is a bug in the failover logic that is affecting some users.

This PR:

  • disables the feature until the failover logic and mTLS connection are fixed.
  • fixes metadata unit tests which were failing due to some get_and_parse_agent_identity_certificate requirement

Fixes #16090

mTLS connection to MDS is failing after a python update. There is a bug in the failover logic that is affecting some users.

This PR:
- disables the feature until the failover logic and mTLS connection are fixed.
- fixes metadata unit tests which were failing due to some get_and_parse_agent_identity_certificate requirement
@nolanleastin nolanleastin requested review from a team as code owners April 23, 2026 19:07
Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the default GCE metadata mTLS mode from 'default' to 'none' and adjusts the associated unit tests. It also introduces mocks for agent identity certificate retrieval in several Compute Engine service account token tests to maintain test isolation. I have no feedback to provide.

@nolanleastin nolanleastin merged commit 0361363 into main Apr 23, 2026
30 checks passed
@nolanleastin nolanleastin deleted the neastin/disable-mds-mtls branch April 23, 2026 21:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

google.auth.default() fails to retreive project_id

2 participants